----- Ursprüngliche Mail ----- > Von: "Kees Cook" <[email protected]> > An: "richard" <[email protected]> > CC: "Kees Cook" <[email protected]>, "Nathan Chancellor" <[email protected]>, > "Guenter Roeck" <[email protected]>, "anton > ivanov" <[email protected]>, "Johannes Berg" > <[email protected]>, "Jens Axboe" <[email protected]>, > "Hannes Reinecke" <[email protected]>, "Martin K. Petersen" > <[email protected]>, "Tiwei Bie" > <[email protected]>, "linux-um" <[email protected]>, "Al > Viro" <[email protected]>, > "linux-kernel" <[email protected]>, "linux-hardening" > <[email protected]> > Gesendet: Montag, 23. Februar 2026 22:43:45 > Betreff: [PATCH] ubd: Use pointer-to-pointers for io_thread_req arrays
> Having an unbounded array for irq_req_buffer and io_req_buffer doesn't > provide any bounds safety, and confuses the needed allocation type, > which is returning a pointer to pointers. Instead of the implicit cast, > switch the variable types. > > Reported-by: Nathan Chancellor <[email protected]> > Reported-by: Guenter Roeck <[email protected]> > Closes: > https://lore.kernel.org/all/[email protected] > Fixes: 69050f8d6d07 ("treewide: Replace kmalloc with kmalloc_obj for > non-scalar > types") > Signed-off-by: Kees Cook <[email protected]> > --- > Cc: Richard Weinberger <[email protected]> > Cc: Anton Ivanov <[email protected]> > Cc: Johannes Berg <[email protected]> > Cc: Jens Axboe <[email protected]> > Cc: Hannes Reinecke <[email protected]> > Cc: "Martin K. Petersen" <[email protected]> > Cc: Tiwei Bie <[email protected]> > Cc: <[email protected]> > --- > arch/um/drivers/ubd_kern.c | 10 +++++----- > 1 file changed, 5 insertions(+), 5 deletions(-) Acked-by: Richard Weinberger <[email protected]> Thanks, //richard
