https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254479
--- Comment #1 from Mark Johnston <ma...@freebsd.org> --- Was this analysis based on a crash you hit, or the output of some static analysis? It is copying the mbuf contents into a buffer of size RSU_TXBUFSZ, not of size sizeof(struct r92s_tx_desc). -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-wireless@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-wireless To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"