[Midnightbsd-cvs] [MidnightBSD/src] ec3614: Fix hostapd EHT link ID bounds check

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: ec3614ffcc454546efe5f5236fc64be5b3013852
      https://github.com/MidnightBSD/src/commit/ec3614ffcc454546efe5f5236fc64be5b3013852
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-02 (Thu, 02 Jul 2026)

  Changed paths:
    M contrib/wpa/src/ap/ieee802_11_eht.c

  Log Message:
  -----------
  Fix hostapd EHT link ID bounds check

Reject invalid Per-STA Profile link IDs before indexing the MLD links array. This prevents the optional IEEE 802.11be association parser from accepting link ID 15 when only IDs 0 through 14 are valid.

Fixes CVE-2026-58374.

AI-Assisted-by: OpenAI Codex


  Commit: bb19945dc0df936ab4e1abd48e8586ec30c78f0a
      https://github.com/MidnightBSD/src/commit/bb19945dc0df936ab4e1abd48e8586ec30c78f0a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-02 (Thu, 02 Jul 2026)

  Changed paths:
    M .agents/skills/cppcheck-clang-format-precommit/SKILL.md
    M .agents/skills/cppcheck-clang-format-precommit/scripts/precommit_c_sanity.sh

  Log Message:
  -----------
  Skip vendor code in C precommit checks

Do not run clang-format, clang-tidy, or cppcheck on staged C files under contrib/ or crypto/. These directories contain vendor code and should not be reformatted by the local checker.

AI-Assisted-by: OpenAI Codex


Compare: https://github.com/MidnightBSD/src/compare/a63ffa9045e1...bb19945dc0df

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications