Test update to 4.14

root/target/linux/brcm2708/patches-4.14/0144-brcmfmac-Delete-redundant-length-check.patch

@@ -0,0 +1,36 @@
+From c4814b051effbbb8c3c3a7c09489c57485934307 Mon Sep 17 00:00:00 2001
+From: Kevin Cernekee <cernekee@chromium.org>
+Date: Sat, 16 Sep 2017 21:08:23 -0700
+Subject: [PATCH 144/277] brcmfmac: Delete redundant length check
+
+brcmf_fweh_process_event() sets event->datalen to the
+endian-swapped value of event_packet->msg.datalen, which is the
+same as emsg.datalen.  This length is already validated in
+brcmf_fweh_process_event(), so there is no need to check it
+again upon dequeuing the event.
+
+Suggested-by: Arend van Spriel <arend.vanspriel@broadcom.com>
+Signed-off-by: Kevin Cernekee <cernekee@chromium.org>
+---
+ drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 -----
+ 1 file changed, 5 deletions(-)
+
+diff --git a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
+index ef72baf6dd96..e7eaa57d11d9 100644
+--- a/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
++++ b/drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c
+@@ -257,11 +257,6 @@ static void brcmf_fweh_event_worker(struct work_struct *work)
+ 		brcmf_dbg_hex_dump(BRCMF_EVENT_ON(), event->data,
+ 				   min_t(u32, emsg.datalen, 64),
+ 				   "event payload, len=%d\n", emsg.datalen);
+-		if (emsg.datalen > event->datalen) {
+-			brcmf_err("event invalid length header=%d, msg=%d\n",
+-				  event->datalen, emsg.datalen);
+-			goto event_free;
+-		}
+ 
+ 		/* special handling of interface event */
+ 		if (event->code == BRCMF_E_IF) {
+-- 
+2.16.1
+