On Sun, 6 Sept 2026 at 23:26, Brian Cain <[email protected]> wrote: > > HEX_SYS_ACCESS wrote a NUL byte past its fixed-size filename buffer when the > guest string filled it. Use lock_user_string() to avoid the out-of-bounds > write. > > Fixes: 7711fdba88b ("target/hexagon: add main arch-specific semihosting > operations") > Resolves: Coverity CID 1685942 > Link: > https://lore.kernel.org/all/cafeaca9mos6vfhf2uhz8z4cdvab+7dy6hjb2emyz2alse-t...@mail.gmail.com/ > Suggested-by: Peter Maydell <[email protected]> > Signed-off-by: Brian Cain <[email protected]> > --- > target/hexagon/hexswi.c | 21 ++++++++++----------- > 1 file changed, 10 insertions(+), 11 deletions(-)
Reviewed-by: Peter Maydell <[email protected]> thanks -- PMM
