Commit 6b34991
committed
scsi: lpfc: Use memcpy() for BIOS version
jira VULN-72458
cve CVE-2025-38332
commit-author Daniel Wagner <[email protected]>
commit ae82eaf
The strlcat() with FORTIFY support is triggering a panic because it
thinks the target buffer will overflow although the correct target
buffer size is passed in.
Anyway, instead of memset() with 0 followed by a strlcat(), just use
memcpy() and ensure that the resulting buffer is NULL terminated.
BIOSVersion is only used for the lpfc_printf_log() which expects a
properly terminated string.
Signed-off-by: Daniel Wagner <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Reviewed-by: Justin Tee <[email protected]>
Signed-off-by: Martin K. Petersen <[email protected]>
(cherry picked from commit ae82eaf)
Signed-off-by: Brett Mastbergen <[email protected]>1 parent 4473236 commit 6b34991
1 file changed
+2
-2
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6032 | 6032 | | |
6033 | 6033 | | |
6034 | 6034 | | |
6035 | | - | |
6036 | | - | |
| 6035 | + | |
6037 | 6036 | | |
| 6037 | + | |
6038 | 6038 | | |
6039 | 6039 | | |
6040 | 6040 | | |
| |||
0 commit comments