mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-05-16 06:41:39 -04:00
Code Issues Packages Projects Releases Wiki Activity

perf header: Sanity check HEADER_PMU_MAPPINGS

Browse Source 
Add upper bound check on pmu_num in process_pmu_mappings() to harden
against malformed perf.data files (max 4096).

Cc: Ian Rogers <irogers@google.com>
Assisted-by: Claude Code:claude-opus-4-6
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Signed-off-by: Namhyung Kim <namhyung@kernel.org>
This commit is contained in:
Arnaldo Carvalho de Melo
2026-04-10 19:08:59 -03:00
committed by Namhyung Kim
parent a881fc5603
commit f613a6d694
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
tools/perf/util/header.c
View File

@@ -64,6 +64,7 @@
#endif
#define MAX_NUMA_NODES 4096
#define MAX_PMU_MAPPINGS 4096
#define MAX_SCHED_DOMAINS 64
/*
@@ -3069,6 +3070,18 @@ static int process_pmu_mappings(struct feat_fd *ff, void *data __maybe_unused)
return 0;
}
if (pmu_num > MAX_PMU_MAPPINGS) {
pr_err("Invalid HEADER_PMU_MAPPINGS: pmu_num (%u) > %u\n",
pmu_num, MAX_PMU_MAPPINGS);
return -1;
}
if (ff->size < sizeof(u32) + pmu_num * 2 * sizeof(u32)) {
pr_err("Invalid HEADER_PMU_MAPPINGS: section too small (%zu) for %u PMUs\n",
ff->size, pmu_num);
return -1;
}
env->nr_pmu_mappings = pmu_num;
if (strbuf_init(&sb, 128) < 0)
return -1;