diff options
| author | Sudeep Holla <sudeep.holla@kernel.org> | 2026-05-17 22:02:41 +0300 |
|---|---|---|
| committer | Sudeep Holla <sudeep.holla@kernel.org> | 2026-05-20 12:00:10 +0300 |
| commit | 56e7e64cdd0e7209a58c8ec66028d63387402919 (patch) | |
| tree | 2ffc511eead434bb7218ee3ee0f1d0ef492e35e5 /include/linux/debugobjects.h | |
| parent | f6fe7c3c007df18afd289ff2d98c692fae9ab085 (diff) | |
| download | linux-56e7e64cdd0e7209a58c8ec66028d63387402919.tar.xz | |
firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size
BASE_ERROR_EVENT carries a variable number of message reports,
with the count encoded in error_status. The notification parser used
that count without checking whether the received payload contained all
reported entries.
Reject truncated payloads before copying the report array.
Link: https://patch.msgid.link/20260517-scmi_fixes-v1-2-d86daec4defd@kernel.org
Signed-off-by: Sudeep Holla <sudeep.holla@kernel.org>
Diffstat (limited to 'include/linux/debugobjects.h')
0 files changed, 0 insertions, 0 deletions