diff options
| author | Michael Bommarito <michael.bommarito@gmail.com> | 2026-05-25 05:28:26 -0400 |
|---|---|---|
| committer | Mika Westerberg <mika.westerberg@linux.intel.com> | 2026-05-26 15:18:21 +0200 |
| commit | 65423079c7420e3dbf9a7aa345c243a3f5752e5d (patch) | |
| tree | a5a933bf5379caa537693bf52ddd7cf035d09f91 /Documentation/arm64/git@git.tavy.me:linux.git | |
| parent | cff8eb65d1eafe7793e54b4d0cf6bf831644630b (diff) | |
thunderbolt: Bound root directory content to block size
__tb_property_parse_dir() does not check that content_offset +
content_len fits within block_len for the root directory case.
When rootdir->length equals or exceeds block_len - 2, the entry
loop reads past the allocated property block.
Add a bounds check after computing content_offset and content_len
to reject directories whose content extends past the block.
Fixes: cdae7c07e3e3 ("thunderbolt: Add support for XDomain properties")
Cc: stable@vger.kernel.org
Assisted-by: Claude:claude-opus-4-7
Signed-off-by: Michael Bommarito <michael.bommarito@gmail.com>
Signed-off-by: Mika Westerberg <mika.westerberg@linux.intel.com>
Diffstat (limited to 'Documentation/arm64/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions
