Messages in this thread | | | Date | Wed, 20 Jul 2022 13:51:21 +0200 | From | Borislav Petkov <> | Subject | Re: [PATCH] EDAC/ghes: Fix buffer overflow in ghes_edac_register() |
| |
On Tue, Jul 19, 2022 at 04:01:24PM -0600, Toshi Kani wrote: > The following buffer overflow BUG was observed on an HPE system. > ghes_edac_register() called strlen() on an uninitialized label, > which had non-zero values from krealloc_array(). > Change dimm_setup_label() to always initialize the label.
Do we also know why dmi_memdev_name() doesn't give bank and/or device?
SMBIOS handle wrong?
Thx.
-- Regards/Gruss, Boris.
https://people.kernel.org/tglx/notes-about-netiquette
| |