On Tue, Jun 17, 2025 at 12:41:33PM +0800, Edward Adam Davis wrote: > According to ieee80211_s1g_optional_len(), it can be clearly seen that the > maximum size of variable is 4 and it is an array. Based on the above, the > parsing of the frame control field and optional field is optimized. Hi, This is incorrect according to IEEE80211-2024 9.3.4.3. In addition, the undefined behaviour reported by the bot due to using zero length arrays rather then variable length arrays already has a patch submitted by Johanes - please see: Link: https://patchwork.kernel.org/project/linux-wireless/patch/20250614003037.a3e82e882251.I2e8b58e56ff2a9f8b06c66f036578b7c1d4e4685@changeid/ lachlan