0xdeafbeef

upd: reported the bug to qualcomm and tp-link. will update the post if either of them gets back to me

Too many exploits is not a that big problem. Non of new fancy exploits with cvss 10.0 from 2026 have worked for this ap. If you don't use all the drivers you have small attack surface. I'd say that it's a surviviourship bias. Bsd has less traction => less bugs found

It's not a router, it's an AP, so in my mind it's just a LAN to wifi bridge, a wrapper around the chip :) People were recommending them, it has PoE, roaming works etc. I thought I could buy a consumer product and stop tinkering lol. I'll check Ubiquiti, but I somehow thought that they are overpriced af and never looked into them

Nah bug is still in the qcom tree. I've not checked how many devices use it though

It was EOL from the factory. 0 updates. But other routers I "own" receive updates regularly so I guess I won some lottery.

They often have logic in blobs and run a separate OS inside. See all wifi 7 drivers, all come with blobs and OSS driver simply is a bridge

Nope. It was bought in the other country, tplink said to return it where it was bought. I don't even remeber where it was :)

They have 3 tiers, individuals can have only blue teaming. But it's to restricted. For me it refused to fix a bash parser cause word ssh was in test cases.

Or fix an sql injection

Better to have golden tests. Even switch from cpu to gpu can give you different tokens

uintptr_t x = opaque((uintptr_t)p); free((void *)x); free(p);

How will you find such violations if opaque comes from so or some ffi, so compiler can't see through? you can't. It's heuristics. Sound type system is much stronger