diff options
| author |   Josh Law <objecting@objecting.org> | 2026-03-18 15:59:14 +0000 |
|---|---|---|
| committer |   Masami Hiramatsu (Google) <mhiramat@kernel.org> | 2026-03-19 08:44:15 +0900 |
| commit | 909bb3a6c53faf86e96694ed09e7f32cad11ba2e (patch) | |
| tree | 7edee66cc16453dd15c22687b08417949d245a7f /include/linux/bcma/ssh:/git@git.zx2c4.com | |
| parent | lib/bootconfig: replace linux/kernel.h with specific includes (diff) | |
lib/bootconfig: validate child node index in xbc_verify_tree()
xbc_verify_tree() validates that each node's next index is within
bounds, but does not check the child index. Add the same bounds
check for the child field.
Without this check, a corrupt bootconfig that passes next-index
validation could still trigger an out-of-bounds memory access via an
invalid child index when xbc_node_get_child() is called during tree
traversal at boot time.
Link: https://lore.kernel.org/all/20260318155919.78168-9-objecting@objecting.org/
Signed-off-by: Josh Law <objecting@objecting.org>
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Diffstat (limited to 'include/linux/bcma/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions