linux-kernel - Re: [PATCH AUTOSEL 5.10 113/137] wireless: wext-spy: Fix out-of-bounds warning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5da1f4fbdac533be3b753e54b43e2058ba270bc8.camel@sipsolutions.net>
Date:   Tue, 06 Jul 2021 16:08:09 +0200
From:   Johannes Berg <johannes@...solutions.net>
To:     Sasha Levin <sashal@...nel.org>, linux-kernel@...r.kernel.org,
        stable@...r.kernel.org
Cc:     "Gustavo A. R. Silva" <gustavoars@...nel.org>,
        kernel test robot <lkp@...el.com>,
        Kees Cook <keescook@...omium.org>,
        linux-wireless@...r.kernel.org, netdev@...r.kernel.org
Subject: Re: [PATCH AUTOSEL 5.10 113/137] wireless: wext-spy: Fix
 out-of-bounds warning

On Tue, 2021-07-06 at 07:21 -0400, Sasha Levin wrote:
> From: "Gustavo A. R. Silva" <gustavoars@...nel.org>
> 
> [ Upstream commit e93bdd78406da9ed01554c51e38b2a02c8ef8025 ]
> 
> Fix the following out-of-bounds warning:
> 
> net/wireless/wext-spy.c:178:2: warning: 'memcpy' offset [25, 28] from the object at 'threshold' is out of the bounds of referenced subobject 'low' with type 'struct iw_quality' at offset 20 [-Warray-bounds]

For the record: while this clearly isn't harmful, there's almost
basically no chance that the stable kernel will ever compile warning-
free with -Warray-bounds, so there's not much point in backporting this
patch.

johannes