linux-kernel - Re: [PATCH v3] drm: Fix potential overflow issue in event

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <aBTKEk7eE2Kur16_@intel.com>
Date: Fri, 2 May 2025 09:35:14 -0400
From: Rodrigo Vivi <rodrigo.vivi@...el.com>
To: Raag Jadav <raag.jadav@...el.com>
CC: <jiangfeng@...inos.cn>, <maarten.lankhorst@...ux.intel.com>,
	<mripard@...nel.org>, <tzimmermann@...e.de>, <airlied@...il.com>,
	<simona@...ll.ch>, <andrealmeid@...lia.com>, <christian.koenig@....com>,
	<dri-devel@...ts.freedesktop.org>, <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH v3] drm: Fix potential overflow issue in event_string
 array

On Thu, May 01, 2025 at 03:22:25PM +0300, Raag Jadav wrote:
> On Wed, Apr 09, 2025 at 09:24:41AM +0300, Raag Jadav wrote:
> > On Wed, Apr 09, 2025 at 09:46:33AM +0800, jiangfeng@...inos.cn wrote:
> > > From: Feng Jiang <jiangfeng@...inos.cn>
> > > 
> > > When calling scnprintf() to append recovery method to event_string,
> > > the second argument should be `sizeof(event_string) - len`, otherwise
> > > there is a potential overflow problem.
> > > 
> > > Fixes: b7cf9f4ac1b8 ("drm: Introduce device wedged event")
> > > Signed-off-by: Feng Jiang <jiangfeng@...inos.cn>
> > 
> > Reviewed-by: Raag Jadav <raag.jadav@...el.com>
> > 
> > Thanks for the fix.
> 
> This one seems got lost in the noise but important for 6.15.
> Any takers?

pushed to drm-misc-fixes

> 
> Raag