On 10/13/2026 10:10 AM, Peter Maydell wrote:
On Wed, 23 Sept 2026 at 16:35, Brian Cain <[email protected]> wrote:
HEX_SYS_OPEN copied guest bytes into a fixed-size buffer until it found a
NUL. A missing terminator could overrun that buffer. Use lock_user() with
the ABI filename length and validate its terminating NUL before opening it.
Replace hexagon_read_memory() with get_user_*() for semihosting argument
accesses.
This is doing two things; it really ought to be two patches, I think.
Okay - will split them up.
thanks
-- PMM
