Re: [PATCH V2] ima: do not copy measurement list to kdump kernel

2025-05-14 Thread Mimi Zohar
On Tue, 2025-05-13 at 07:31 -0700, steven chen wrote: > From: Steven Chen > > Kdump kernel doesn't need IMA to do integrity measurement. > Hence the measurement list in 1st kernel doesn't need to be copied to > kdump kernel. > > Here skip allocating buffer for measurement list copying if loading

Re: [PATCH] kexec/zboot: Add boundary check on PE header offset

2025-05-14 Thread Simon Horman
On Tue, May 13, 2025 at 06:32:40PM +0800, Pingfan Liu wrote: > If a buildroot enviorment does not provide libzstd and kexec_file_load a > zstd compressed kernel, it will suffer from coredump. > > The following is observed from the coredump > > Core was generated by `/sbin/kexec -s -p > --command