linux/drivers/parport
tuhaowen ab11dac93d dev/parport: fix the array out-of-bounds risk
Fixed array out-of-bounds issues caused by sprintf
by replacing it with snprintf for safer data copying,
ensuring the destination buffer is not overflowed.

Below is the stack trace I encountered during the actual issue:

[ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector:
Kernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport]
[ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm:
QThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2
[ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp
[ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun
PGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024
[ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace:
[ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0
[ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20
[ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c
[ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc
[ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38
[ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]

Signed-off-by: tuhaowen <tuhaowen@uniontech.com>
Cc: stable <stable@kernel.org>
Link: https://lore.kernel.org/r/20240708080430.8221-1-tuhaowen@uniontech.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-07-10 14:59:45 +02:00
..
BUGS-parport
daisy.c parport: Remove parport_driver.devmodel 2024-07-03 16:44:22 +02:00
ieee1284_ops.c parport: remove non-zero check on count 2021-08-27 16:18:42 +02:00
ieee1284.c treewide: Use fallthrough pseudo-keyword 2020-08-23 17:36:59 -05:00
Kconfig parport: PC style parport depends on HAS_IOPORT 2023-05-31 19:17:40 +01:00
Makefile parport: remove ax88796 driver 2023-01-16 09:26:06 +01:00
multiface.h License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
parport_amiga.c parport: amiga: Mark driver struct with __refdata to prevent section mismatch 2024-06-04 18:08:31 +02:00
parport_atari.c module: remove never implemented MODULE_SUPPORTED_DEVICE 2021-03-17 13:16:18 -07:00
parport_cs.c parport: Convert printk(KERN_<LEVEL> to pr_<level>( 2020-04-23 17:05:37 +02:00
parport_gsc.c parport: gsc: mark init function static 2023-11-10 08:41:23 +01:00
parport_gsc.h parport: gsc: remove DMA leftover code 2023-08-03 14:40:37 +02:00
parport_ip32.c treewide: remove editor modelines and cruft 2021-05-07 00:26:34 -07:00
parport_mfc3.c parport: mfc3: avoid empty-body warning 2024-04-11 15:14:10 +02:00
parport_pc.c parport: Add support for Brainboxes IX/UC/PX parallel cards 2023-12-07 11:10:44 +09:00
parport_serial.c parport: parport_serial: Add Brainboxes device IDs and geometry 2023-12-15 19:54:56 +01:00
parport_sunbpp.c parport: sunbpp: Convert to platform remove callback returning void 2024-03-07 21:50:06 +00:00
probe.c parport: Use string_upper() instead of open coded variant 2021-05-21 14:48:58 +02:00
procfs.c dev/parport: fix the array out-of-bounds risk 2024-07-10 14:59:45 +02:00
share.c parport: Remove 'drivers' list 2024-07-03 16:44:22 +02:00
TODO-parport