linux-kernel - [PATCH 0/3] ihex: add some bounds checking to firmware parsing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <cover.1748463049.git.dan.carpenter@linaro.org>
Date: Wed, 28 May 2025 23:22:09 +0300
From: Dan Carpenter <dan.carpenter@...aro.org>
To: Dmitry Torokhov <dmitry.torokhov@...il.com>
Cc: Al Viro <viro@...iv.linux.org.uk>,
	David Lechner <dlechner@...libre.com>,
	Enric Balletbo i Serra <eballetbo@...nel.org>,
	Erick Archer <erick.archer@...look.com>,
	Guenter Roeck <linux@...ck-us.net>,
	"Gustavo A. R. Silva" <gustavoars@...nel.org>,
	Hans de Goede <hdegoede@...hat.com>,
	Hans Verkuil <hverkuil@...all.nl>,
	Javier Carrasco <javier.carrasco.cruz@...il.com>,
	Kees Cook <kees@...nel.org>, linux-input@...r.kernel.org,
	linux-kernel@...r.kernel.org, linux-media@...r.kernel.org,
	linux-watchdog@...r.kernel.org,
	Mauro Carvalho Chehab <mchehab@...nel.org>,
	Wim Van Sebroeck <wim@...ux-watchdog.org>
Subject: [PATCH 0/3] ihex: add some bounds checking to firmware parsing

These three patches go to different subsystems so hopefully the
individual maintainers can apply them.  I can resend them as
individual patches if that's easier.

The ihex firmware code is a list of records of various lengths.  The
ihex code ensures that total length of the records doesn't read
beyond the end of the fw->data[], however the parsers need to check
that individual records are not too large.

Dan Carpenter (3):
  media: gspca: Add bounds checking to firmware parser
  watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
  Input: ims-pcu - Check record size in ims_pcu_flash_firmware()

 drivers/input/misc/ims-pcu.c    |  6 ++++++
 drivers/media/usb/gspca/vicam.c | 10 ++++++++--
 drivers/watchdog/ziirave_wdt.c  |  3 +++
 3 files changed, 17 insertions(+), 2 deletions(-)

-- 
2.47.2