Skip to content

plugins/ocp: fix telemetry parser buffer overflow#2694

Merged
igaw merged 1 commit intolinux-nvme:masterfrom
igaw:fix-ocp
Feb 7, 2025
Merged

plugins/ocp: fix telemetry parser buffer overflow#2694
igaw merged 1 commit intolinux-nvme:masterfrom
igaw:fix-ocp

Conversation

@igaw
Copy link
Collaborator

@igaw igaw commented Feb 7, 2025

The fixed 256-byte description_str will overflow for any reasonably sized data_size >= 128.

Max data_size is for OCP VU Event Data is 0xFF Dwords, so the buffer should be at least 1020 bytes + 1 for null. 1024 seems like a nice number for OCP.

Reported-by: Nate Thornton n.thornton@samsung.com

Fixes: #2686

The fixed 256-byte description_str will overflow for any reasonably
sized data_size >= 128.

Max data_size is for OCP VU Event Data is 0xFF Dwords, so the buffer
should be at least 1020 bytes + 1 for null. 1024 seems like a nice
number for OCP.

Reported-by: Nate Thornton <n.thornton@samsung.com>
Signed-off-by: Daniel Wagner <wagi@kernel.org>
@igaw igaw merged commit d40125f into linux-nvme:master Feb 7, 2025
17 checks passed
@igaw igaw deleted the fix-ocp branch February 7, 2025 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ocp: telemetry parser buffer overflow for events exceeding 32 dwords

1 participant