linux-kernel - Re: [PATCH v2 2/2] apei/ghes: don't go past allocated memory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20251126151325.GCaScZFXvm-7PYy0Dh@fat_crate.local>
Date: Wed, 26 Nov 2025 16:13:25 +0100
From: Borislav Petkov <bp@...en8.de>
To: Mauro Carvalho Chehab <mchehab+huawei@...nel.org>
Cc: "Rafael J. Wysocki" <rafael@...nel.org>,
	Hanjun Guo <guohanjun@...wei.com>, Ira Weiny <ira.weiny@...el.com>,
	Jason Tian <jason@...amperecomputing.com>,
	Jonathan Cameron <Jonathan.Cameron@...wei.com>,
	Len Brown <lenb@...nel.org>,
	Mauro Carvalho Chehab <mchehab@...nel.org>,
	Peter Zijlstra <peterz@...radead.org>,
	Shuai Xue <xueshuai@...ux.alibaba.com>,
	Smita Koralahalli <Smita.KoralahalliChannabasappa@....com>,
	Tony Luck <tony.luck@...el.com>, linux-acpi@...r.kernel.org,
	linux-edac@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH v2 2/2] apei/ghes: don't go past allocated memory

On Wed, Nov 26, 2025 at 04:05:46PM +0100, Mauro Carvalho Chehab wrote:
> If the BIOS generates a very small ARM Processor Error, or
> an incomplete one, the current logic will fail to deferrence
> 
> 	err->section_length
> and
> 	ctx_info->size
> 
> Add checks to avoid that. With such changes, those GHESv2
> records won't cause OOPSes:
> 
>     GUID: e19e3d16-bc11-11e4-9caa-c2051d5d46b0
>     CPER:
>       00000000  23 da a0 ce 9a 1b 92 d7 08 2b 32 08 7b 56 1b 23   #........+2.{V.#

Surely you can summarize this gibberish instead of putting it in the commit
message.

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette