]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
ubd: Use pointer-to-pointers for io_thread_req arrays
authorKees Cook <kees@kernel.org>
Mon, 23 Feb 2026 21:43:45 +0000 (13:43 -0800)
committerKees Cook <kees@kernel.org>
Mon, 23 Feb 2026 22:35:16 +0000 (14:35 -0800)
commit96a7b71c4438d3b72d6c95e3efdc9e8e8aee6b78
treee633c4dacaebdbe1a6f728ef02b7b2b54b3db53a
parent6de23f81a5e08be8fbf5e8d7e9febc72a5b5f27f
ubd: Use pointer-to-pointers for io_thread_req arrays

Having an unbounded array for irq_req_buffer and io_req_buffer doesn't
provide any bounds safety, and confuses the needed allocation type,
which is returning a pointer to pointers. Instead of the implicit cast,
switch the variable types.

Reported-by: Nathan Chancellor <nathan@kernel.org>
Reported-by: Guenter Roeck <linux@roeck-us.net>
Closes: https://lore.kernel.org/all/b04b6c13-7d0e-4a89-9e68-b572b6c686ac@roeck-us.net
Fixes: 69050f8d6d07 ("treewide: Replace kmalloc with kmalloc_obj for non-scalar types")
Acked-by: Richard Weinberger <richard@nod.at>
Link: https://patch.msgid.link/20260223214341.work.846-kees@kernel.org
Signed-off-by: Kees Cook <kees@kernel.org>
arch/um/drivers/ubd_kern.c