On Wed, 17 Sep 2025 22:20:01 +0300, Matvey Kovalev wrote:
If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function.
Replace fw->size by m3_len.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[...]
Applied, thanks!
[1/1] wifi: ath11k: fix NULL derefence in ath11k_qmi_m3_load() commit: 3fd2ef2ae2b5c955584a3bee8e83ae7d7a98f782
Best regards,