1:  0dcd01080800 ! 1:  e2dd21c403d0 wifi: mm81x: validate YAPS receive framing
    @@ Commit message
         packet data after removing the reserved metadata page.
     
         Fixes: b1906cea00b0 ("wifi: mm81x: add mm81x Wi-Fi HaLow driver")
    +    Suggested-by: Lachlan Hodges <lachlan.hodges@morsemicro.com>
         Assisted-by: Codex:gpt-5
         Signed-off-by: Felix Hoffmann <f3lix.dev@gmx.de>
     
      ## drivers/net/wireless/morsemicro/mm81x/yaps_hw.c ##
    -@@ drivers/net/wireless/morsemicro/mm81x/yaps_hw.c: static bool mm81x_read_pkts_h_is_valid_delim(u32 delim)
    +@@ drivers/net/wireless/morsemicro/mm81x/yaps_hw.c: static int mm81x_yaps_hw_write_pkts(struct mm81x_yaps *yaps,
    + static bool mm81x_read_pkts_h_is_valid_delim(u32 delim)
    + {
    + 	u8 calc_crc = mm81x_yaps_hw_crc(delim);
    +-	int pkt_size = YAPS_DELIM_GET_PHANDLE_SIZE(delim);
    ++	int pkt_size = YAPS_DELIM_GET_PKT_SIZE(delim);
    + 	int padding = YAPS_DELIM_GET_PADDING(delim);
    + 
      	if (calc_crc != YAPS_DELIM_GET_CRC(delim))
      		return false;
      
     -	if (pkt_size == 0)
    -+	if (pkt_size <= YAPS_RESERVED_PAGE_SIZE)
    ++	if (pkt_size <= 0)
    + 		return false;
    + 
    +-	if ((pkt_size + padding) > YAPS_MAX_PKT_SIZE_BYTES)
    ++	if ((pkt_size + YAPS_RESERVED_PAGE_SIZE + padding) >
    ++	    YAPS_MAX_PKT_SIZE_BYTES)
      		return false;
      
    - 	if ((pkt_size + padding) > YAPS_MAX_PKT_SIZE_BYTES)
    + 	/* Pkt length + padding should not require more padding */
     @@ drivers/net/wireless/morsemicro/mm81x/yaps_hw.c: static int mm81x_yaps_hw_read_pkts(struct mm81x_yaps *yaps,
      		return 0;
      	if (bytes_remaining < 0)