These patches validate the size assumptions used by dynamic cpumask fields
and prevent explicit structure sizes from wrapping field offsets.

Changes in v2:
- parse explicit structure sizes into a u32 and reject values above INT_MAX
  before assigning them to the signed size variable

Patch 1 is unchanged.

Yifan Zhang (2):
  tracing/user_events: validate dynamic cpumask size
  tracing/user_events: reject overflowing field offsets

 kernel/trace/trace_events_user.c | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

-- 
2.39.5 (Apple Git-154)

Reply via email to