diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-07-10 15:26:04 -0700 |
|---|---|---|
| committer | Vineet Gupta <vgupta@kernel.org> | 2026-07-10 15:26:04 -0700 |
| commit | 460511c11f0d67e62c6526b191b205eafc8033b2 (patch) | |
| tree | eec3a6fb1e57dec1363cc48789d10949d843f4ef /Documentation/drivers/git@git.tavy.me:linux-stable.git | |
| parent | 8cdeaa50eae8dad34885515f62559ee83e7e8dda (diff) | |
arc: validate DT CPU map strings before parsing them
arc_get_cpu_map() fetches the possible-cpus or present-cpus property
from the flat DT and immediately passes the raw pointer to
cpulist_parse(). That parser expects a NUL-terminated text buffer, but
this path does not prove that the DT property is terminated within its
declared bounds.
Reject unterminated CPU-map properties before handing them to
cpulist_parse().
Changes since v1:
- fold the NUL-termination check into the initial lookup test, as
suggested by Vineet Gupta
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Signed-off-by: Vineet Gupta <vgupta@kernel.org>
Diffstat (limited to 'Documentation/drivers/git@git.tavy.me:linux-stable.git')
0 files changed, 0 insertions, 0 deletions
