Re: [PATCH] soc: qcom: qmi_encdec: Restrict string length in decode

From: Praveenkumar I
Date: Mon Jul 31 2023 - 05:56:43 EST



On 7/31/2023 2:48 PM, Konrad Dybcio wrote:
On 31.07.2023 11:14, Praveenkumar I wrote:
The QMI TLV value for strings in a lot of qmi element info structures
account for null terminated strings with MAX_LEN + 1. If a string is
actually MAX_LEN + 1 length, this will cause an out of bounds access
when the NULL character is appended in decoding.

Signed-off-by: Chris Lew <quic_clew@xxxxxxxxxxx>
Signed-off-by: Praveenkumar I <quic_ipkumar@xxxxxxxxxxx>
---
Fixes + Cc: stable?
Sure, will add.

Konrad
--
Thanks,
Praveenkumar