Received: by 2002:a6b:fb09:0:0:0:0:0 with SMTP id h9csp209019iog; Wed, 15 Jun 2022 00:09:08 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyavhvU5sOfN3+W2MXaZQ0hM8NKjW5DnWIifCCvPms4w9sTl9DTc7yXC2Z/7P25wR3HEsqt X-Received: by 2002:a05:6a00:2181:b0:51b:560b:dd30 with SMTP id h1-20020a056a00218100b0051b560bdd30mr8547211pfi.44.1655276948495; Wed, 15 Jun 2022 00:09:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1655276948; cv=none; d=google.com; s=arc-20160816; b=H4x6w0q9xHS4k9aDd1YtXRH9gyfrhcPsj7tKf74RSsgD7JteEu6qYR3zeeYKrZXC9N zmFLfaCYbUBPdZ/zfXfmYCyUd8ucX3bz+k0Ji2b/6NYiAM1c0SihHu+7OaAbdSF0smmr otQdXi7y5mB0nqJi8s4Fza+/RwyAu/cVozfcmfm0LxLx5ptOg/VXhDX/xWy9ei98sQcO y3EfsFqWaR+VHyNFLut4Ff1J3db8P4iEEpVfPKpwAe00K+ksgbOj/JKKIWnl41/xIJzU 1kZ1qmDFh+jNg2Oz8yNgGzr/HqbW0ZapRb/3Ec3TdoS78gLPVT8ot8gbTuN+AK8eYy6O 2VKQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:user-agent :content-transfer-encoding:references:in-reply-to:date:to:from :subject:message-id:dkim-signature; bh=ejR15jOo17jAqwb9TH1ItkfDwb9HMdVRIrDnKZ/fF08=; b=TcdUqFFRL5AKdduNaHV3NjU7EIh9BuGUVP0yk+ZGPaqrQU55kjrmIY88bIHk5e2bOj jAYIRCu6+L5rXjs4b4ys0lNgsvmtgTmZ5/Vx6xOiVp0knuHZQa0ZAXmlebom4KIgjr55 4W60e2sPS8xgFbiFmFVu2TIw+KbDhEd5LniUCmgEle9/+9aKVTkVm/sOjhIMxUIjrx9G 7wqC9Bu6kdG8OOkBV2BGYWG7bd63Qyt5WRqf0nMXeFKB4G2Np3efOWFJw/tFU86seXmA KEH1xm5De7b8mimbbYejSkyOQ4YVPGfhW1RmarBchLE+BJu2cZ9VbxwR7pgDlTdU0tyN iTXQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@sipsolutions.net header.s=mail header.b=UkBfRYmn; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=sipsolutions.net Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id f11-20020a170902ce8b00b001637d6a52e8si18429290plg.19.2022.06.15.00.08.51; Wed, 15 Jun 2022 00:09:08 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@sipsolutions.net header.s=mail header.b=UkBfRYmn; spf=pass (google.com: domain of linux-wireless-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-wireless-owner@vger.kernel.org; dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=sipsolutions.net Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S238412AbiFOHG5 (ORCPT + 65 others); Wed, 15 Jun 2022 03:06:57 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:50214 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230083AbiFOHG5 (ORCPT ); Wed, 15 Jun 2022 03:06:57 -0400 Received: from sipsolutions.net (s3.sipsolutions.net [IPv6:2a01:4f8:191:4433::2]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id AF5FA167EE for ; Wed, 15 Jun 2022 00:06:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sipsolutions.net; s=mail; h=MIME-Version:Content-Transfer-Encoding: Content-Type:References:In-Reply-To:Date:To:From:Subject:Message-ID:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-To: Resent-Cc:Resent-Message-ID; bh=ejR15jOo17jAqwb9TH1ItkfDwb9HMdVRIrDnKZ/fF08=; t=1655276815; x=1656486415; b=UkBfRYmnKio3JIKO7lH60HmdLGlW4vma83UohZGXy/adWN6 JG65gB6qrXpi4zp6B4CN3SygcXZTf+FcAiOR1gLlOOWuALqz0OcIgr7irWFvgD3W/rNJOPbSdxStR EKdg3ytKCnKKEqFgekLwGrGa9ySBu388wVlBuRc3nlPTgn2uIkgftK9817OT2y1LEIjgZ7/DexdID xLZvXXB1D3D2aiRo77nZZhkD9+g1e1zUloLi1MctsGUdw+AQDK8ILHjct/UCMm6usTzAu2BzC6taM ATC/w/MfRHcH2qeRsXkMMjFWB3Z2WN8YWQ1n1pKwq7Kp4hr9FYlZ9G6vC8Ny4ECw==; Received: by sipsolutions.net with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.95) (envelope-from ) id 1o1N76-006MFe-4Q; Wed, 15 Jun 2022 09:06:52 +0200 Message-ID: Subject: Re: [PATCH] iwlwifi: pcie: Fixed integer overflow in iwl_write_to_user_buf From: Johannes Berg To: Hyunwoo Kim , gregory.greenman@intel.com, linux-wireless@vger.kernel.org Date: Wed, 15 Jun 2022 09:06:51 +0200 In-Reply-To: <20220614173352.GA588327@ubuntu> References: <20220614173352.GA588327@ubuntu> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.2 (3.44.2-1.fc36) MIME-Version: 1.0 X-malware-bazaar: not-scanned X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_PASS,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-wireless@vger.kernel.org On Tue, 2022-06-14 at 10:33 -0700, Hyunwoo Kim wrote: > An integer overflow occurs in the iwl_write_to_user_buf() function, > which is called by the iwl_dbgfs_monitor_data_read() function. >=20 Out of curiosity, how did you find this? johannes