From: "Ilpo Järvinen" <ilpo.jarvinen@linux.intel.com>
To: Prasanth Ksr <prasanth.ksr@dell.com>,
Vladimir Moskovkin <Vladimir.Moskovkin@kaspersky.com>
Cc: Hans de Goede <hdegoede@redhat.com>,
Mario Limonciello <mario.limonciello@dell.com>,
Divya Bharathi <divya.bharathi@dell.com>,
Dell.Client.Kernel@dell.com,
platform-driver-x86@vger.kernel.org,
linux-kernel@vger.kernel.org, stable@vger.kernel.org,
lvc-project@linuxtesting.org
Subject: Re: [PATCH] platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
Date: Thu, 15 May 2025 14:52:27 +0300 [thread overview]
Message-ID: <174730994725.2473.3936667480812297322.b4-ty@linux.intel.com> (raw)
In-Reply-To: <39973642a4f24295b4a8fad9109c5b08@kaspersky.com>
On Wed, 14 May 2025 12:12:55 +0000, Vladimir Moskovkin wrote:
> If the 'buf' array received from the user contains an empty string, the
> 'length' variable will be zero. Accessing the 'buf' array element with
> index 'length - 1' will result in a buffer overflow.
>
> Add a check for an empty string.
>
> Found by Linux Verification Center (linuxtesting.org) with SVACE.
>
> [...]
Thank you for your contribution, it has been applied to my local
review-ilpo-fixes branch. Note it will show up in the public
platform-drivers-x86/review-ilpo-fixes branch only once I've pushed my
local branch there, which might take a while.
The list of commits applied:
[1/1] platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
commit: 4e89a4077490f52cde652d17e32519b666abf3a6
--
i.
prev parent reply other threads:[~2025-05-15 11:52 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-05-14 12:12 Vladimir Moskovkin
2025-05-15 11:52 ` Ilpo Järvinen [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=174730994725.2473.3936667480812297322.b4-ty@linux.intel.com \
--to=ilpo.jarvinen@linux.intel.com \
--cc=Dell.Client.Kernel@dell.com \
--cc=Vladimir.Moskovkin@kaspersky.com \
--cc=divya.bharathi@dell.com \
--cc=hdegoede@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=lvc-project@linuxtesting.org \
--cc=mario.limonciello@dell.com \
--cc=platform-driver-x86@vger.kernel.org \
--cc=prasanth.ksr@dell.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®