On Wed, 23 Sept 2026 at 16:35, Brian Cain <[email protected]> wrote: > > HEX_SYS_OPEN copied guest bytes into a fixed-size buffer until it found a > NUL. A missing terminator could overrun that buffer. Use lock_user() with > the ABI filename length and validate its terminating NUL before opening it. > > Replace hexagon_read_memory() with get_user_*() for semihosting argument > accesses.
This is doing two things; it really ought to be two patches, I think. thanks -- PMM
