Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Bjorn Andersson <andersson@kernel.org>
To:     agross@kernel.org, konrad.dybcio@linaro.org,
        linux-arm-msm@vger.kernel.org, linux-kernel@vger.kernel.org,
        Praveenkumar I <quic_ipkumar@quicinc.com>
Cc:     quic_varada@quicinc.com, quic_clew@quicinc.com
Subject: Re: [PATCH v3] soc: qcom: qmi_encdec: Restrict string length in decode
Date:   Thu,  3 Aug 2023 09:38:07 -0700
Message-ID: <169108064636.108343.3377347407906942880.b4-ty@kernel.org>
In-Reply-To: <20230801064712.3590128-1-quic_ipkumar@quicinc.com>
References: <20230801064712.3590128-1-quic_ipkumar@quicinc.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Precedence: bulk


On Tue, 01 Aug 2023 12:17:12 +0530, Praveenkumar I wrote:
> The QMI TLV value for strings in a lot of qmi element info structures
> account for null terminated strings with MAX_LEN + 1. If a string is
> actually MAX_LEN + 1 length, this will cause an out of bounds access
> when the NULL character is appended in decoding.
> 
> 

Applied, thanks!

[1/1] soc: qcom: qmi_encdec: Restrict string length in decode
      commit: 8d207400fd6b79c92aeb2f33bb79f62dff904ea2

Best regards,
-- 
Bjorn Andersson <andersson@kernel.org>