fio: fix CVE-2025-10823

Reference:
	https://nvd.nist.gov/vuln/detail/CVE-2025-10823
	https://github.com/axboe/fio/issues/1982

Upstream-patch:
	6a39dfaffd

Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Saravanan 2025-10-15 11:37:17 +05:30 committed by Khem Raj
parent 7b53cb83bb
commit 0fa645bb69
No known key found for this signature in database
GPG Key ID: BB053355919D3314
2 changed files with 39 additions and 0 deletions

View File

@ -0,0 +1,37 @@
From 6a39dfaffdb8a6c2080eec0dc7fb1ee532d54025 Mon Sep 17 00:00:00 2001
From: Jens Axboe <axboe@kernel.dk>
Date: Tue, 23 Sep 2025 11:50:46 -0600
Subject: [PATCH] options: check for NULL input string and fail
Waste of time busy work.
Link: https://github.com/axboe/fio/issues/1982
CVE: CVE-2025-10823
Upstream-Status: Backport
https://github.com/axboe/fio/commit/6a39dfaffdb8a6c2080eec0dc7fb1ee532d54025
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Saravanan <saravanan.kadambathursubramaniyam@windriver.com>
---
options.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/options.c b/options.c
index c35878f..562c5bc 100644
--- a/options.c
+++ b/options.c
@@ -1616,6 +1616,9 @@ static int str_buffer_pattern_cb(void *data, const char *input)
struct thread_data *td = cb_data_to_td(data);
int ret;
+ if (!input)
+ return 1;
+
/* FIXME: for now buffer pattern does not support formats */
ret = parse_and_fill_pattern_alloc(input, strlen(input),
&td->o.buffer_pattern, NULL, NULL, NULL);
--
2.48.1

View File

@ -25,6 +25,8 @@ PACKAGECONFIG[numa] = ",--disable-numa,numactl"
SRC_URI = "git://git.kernel.dk/fio.git;branch=master"
SRCREV = "a6e474c9e896e4ba1eb40066a03402afb040710a"
SRC_URI += "file://CVE-2025-10823.patch"
UPSTREAM_CHECK_GITTAGREGEX = "fio-(?P<pver>\d+(\.\d+)+)"