Zijun Hu 31e4e12e0e software node: Correct a OOB check in software_node_get_reference_args() ...

software_node_get_reference_args() wants to get @index-th element, so
the property value requires at least '(index + 1) * sizeof(*ref)' bytes
but that can not be guaranteed by current OOB check, and may cause OOB
for malformed property.

Fix by using as OOB check '((index + 1) * sizeof(*ref) > prop->length)'.

Reviewed-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com>
Link: https://lore.kernel.org/r/20250414-fix_swnode-v2-1-9c9e6ae11eab@quicinc.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-04-15 18:24:16 +02:00

..

firmware_loader

Merge tag 'constfy-sysctl-6.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl

2025-01-29 10:35:40 -08:00

power

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

regmap

Merge tag 'regmap-v6.15' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

2025-03-29 14:31:39 -07:00

test

drivers: base: test: Add ...find_device_by...(... NULL) tests

2024-12-24 09:48:09 +01:00

arch_numa.c

arch_numa: Restore nid checks before registering a memblock with a node

2024-12-01 22:04:52 +02:00

arch_topology.c

Merge branch 'for-next/smt-control' into for-next/core

2025-03-25 19:32:28 +00:00

attribute_container.c

driver core: attribute_container: Remove unused functions

2024-09-13 15:41:42 +02:00

auxiliary_sysfs.c

driver core: auxiliary bus: show auxiliary device IRQs

2024-07-11 14:17:03 -07:00

auxiliary.c

driver core: auxiliary bus: add device creation helpers

2025-04-15 15:20:37 +02:00

base.h

driver core: add a faux bus for use when a simple device/bus is needed

2025-02-13 16:58:51 +01:00

bus.c

drivers/base/bus.c: fix spelling of "subsystem"

2025-02-21 09:20:30 +01:00

cacheinfo.c

cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU

2024-12-06 13:07:47 +01:00

class.c

drivers: core: remove device_link argument from class_compat_[create|remove]_link

2025-01-10 15:42:20 +01:00

component.c

component: do not try to unbind unbound components

2025-04-15 18:05:40 +02:00

container.c

driver core: container: make container_subsys const

2023-12-21 13:56:10 +01:00

core.c

Merge tag 'pci-v6.15-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/pci/pci

2025-03-28 19:36:53 -07:00

cpu.c

riscv: Add ghostwrite vulnerability

2025-01-18 12:33:39 -08:00

dd.c

Merge tag 'driver-core-6.12-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-09-27 08:48:37 -07:00

devcoredump.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

devres.c

devres: simplify devm_kstrdup() using devm_kmemdup()

2025-04-15 18:06:30 +02:00

devtmpfs.c

Merge tag 'vfs-6.15-rc1.async.dir' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

2025-03-24 10:47:14 -07:00

driver.c

driver core: Introduce device_iter_t for device iterating APIs

2025-01-10 15:26:12 +01:00

faux.c

driver core: faux: Add sysfs groups after probing

2025-04-15 14:16:08 +02:00

firmware.c

…

hypervisor.c

…

init.c

driver core: add a faux bus for use when a simple device/bus is needed

2025-02-13 16:58:51 +01:00

isa.c

driver core: have match() callback in struct bus_type take a const *

2024-07-03 15:16:54 +02:00

Kconfig

arch_numa: switch over to numa_memblks

2024-09-03 21:15:32 -07:00

Makefile

driver core: add a faux bus for use when a simple device/bus is needed

2025-02-13 16:58:51 +01:00

map.c

driver: base: Prefer unsigned int to bare use of unsigned

2021-07-21 17:30:09 +02:00

memory.c

drivers/base/memory: improve add_boot_memory_block()

2025-03-17 22:07:01 -07:00

module.c

Revert "driver core: Fix uevent_show() vs driver detach race"

2024-10-29 01:23:43 +01:00

node.c

acpi: numa: Add support to enumerate and store extended linear address mode

2025-02-26 13:45:22 -07:00

physical_location.c

driver core: location: Use str_yes_no() helper function

2025-02-21 09:20:30 +01:00

physical_location.h

driver core: physical_location.h remove extern from function prototypes

2023-03-24 15:35:48 +01:00

pinctrl.c

…

platform-msi.c

genirq/msi: Remove platform MSI leftovers

2024-07-18 20:31:21 +02:00

platform.c

platform: replace magic number with macro PLATFORM_DEVID_NONE

2025-04-15 18:06:08 +02:00

property.c

device property: Split property reading bool and presence test ops

2025-01-13 17:47:29 -06:00

soc.c

driver core: mark remaining local bus_type variables as const

2023-12-21 13:56:30 +01:00

swnode.c

software node: Correct a OOB check in software_node_get_reference_args()

2025-04-15 18:24:16 +02:00

syscore.c

syscore: Use pm_pr_dbg() for syscore_{suspend,resume}()

2020-09-08 13:32:06 +02:00

topology.c

topology: Keep the cpumask unchanged when printing cpumap

2025-01-07 17:58:08 +01:00

trace.c

devres: Enable trace events

2021-06-15 17:14:36 +02:00

trace.h

devres: Fix page faults when tracing devres from unloaded modules

2024-10-14 08:21:09 +02:00

transport_class.c

drivers: base: transport_class: fix resource leak when transport_add_device() fails

2023-01-20 14:22:53 +01:00