]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
authorVladimir Moskovkin <Vladimir.Moskovkin@kaspersky.com>
Wed, 14 May 2025 12:12:55 +0000 (12:12 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 4 Jun 2025 12:40:21 +0000 (14:40 +0200)
commit60bd13f8c4b3de2c910ae1cdbef85b9bbc9685f5
treea80a882c68dabeada204804babc5c6f3b08a6668
parent836024a6c89ab92da28aaa5aa5849dcf763eb906
platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()

commit 4e89a4077490f52cde652d17e32519b666abf3a6 upstream.

If the 'buf' array received from the user contains an empty string, the
'length' variable will be zero. Accessing the 'buf' array element with
index 'length - 1' will result in a buffer overflow.

Add a check for an empty string.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: e8a60aa7404b ("platform/x86: Introduce support for Systems Management Driver over WMI for Dell Systems")
Cc: stable@vger.kernel.org
Signed-off-by: Vladimir Moskovkin <Vladimir.Moskovkin@kaspersky.com>
Link: https://lore.kernel.org/r/39973642a4f24295b4a8fad9109c5b08@kaspersky.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/platform/x86/dell/dell-wmi-sysman/passobj-attributes.c