linux-yocto/drivers/base
Zijun Hu 142acd739e software node: Correct a OOB check in software_node_get_reference_args()
[ Upstream commit 31e4e12e0e ]

software_node_get_reference_args() wants to get @index-th element, so
the property value requires at least '(index + 1) * sizeof(*ref)' bytes
but that can not be guaranteed by current OOB check, and may cause OOB
for malformed property.

Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.

Reviewed-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com>
Link: https://lore.kernel.org/r/20250414-fix_swnode-v2-1-9c9e6ae11eab@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-27 11:04:19 +01:00
..
firmware_loader firmware_loader: Block path traversal 2024-10-17 15:08:01 +02:00
power PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() 2025-06-27 11:04:15 +01:00
regmap regmap-irq: Add missing kfree() 2025-03-13 12:47:19 +01:00
test driver core: test_async: fix an error code 2023-09-19 12:20:18 +02:00
arch_topology.c arm64: topology: move store_cpu_topology() to shared code 2022-10-30 09:41:19 +01:00
attribute_container.c
base.h
bus.c driver core: bus: Fix double free in driver API bus_register() 2024-12-14 19:48:09 +01:00
cacheinfo.c
class.c class: fix possible memory leak in __class_register() 2023-01-14 10:15:54 +01:00
component.c
container.c
core.c driver core: Introduce device_find_any_child() helper 2024-12-14 19:47:56 +01:00
cpu.c x86/rfds: Mitigate Register File Data Sampling (RFDS) 2024-04-13 12:58:59 +02:00
dd.c driver core: Release all resources during unbind before updating device links 2023-12-08 08:46:16 +01:00
devcoredump.c devcoredump: Send uevent once devcd is ready 2023-12-13 18:27:07 +01:00
devres.c devres: Initialize an uninitialized struct member 2024-09-12 11:06:48 +02:00
devtmpfs.c
driver.c driver: platform: Add helper for safer setting of driver_override 2023-11-08 17:30:47 +01:00
firmware.c
hypervisor.c
init.c
isa.c
Kconfig
Makefile
map.c
memory.c
module.c Revert "driver core: Fix uevent_show() vs driver detach race" 2024-11-08 16:22:02 +01:00
node.c
pinctrl.c
platform-msi.c
platform.c driver: platform: Add helper for safer setting of driver_override 2023-11-08 17:30:47 +01:00
property.c device property: Add const qualifier to device_get_match_data() parameter 2024-10-17 15:07:44 +02:00
soc.c
swnode.c software node: Correct a OOB check in software_node_get_reference_args() 2025-06-27 11:04:19 +01:00
syscore.c
topology.c
transport_class.c