[PATCH v2] tunables: Terminate immediately if end of input is reached
authorSiddhesh Poyarekar <siddhesh@redhat.com>
Mon, 11 Sep 2023 22:53:15 +0000 (18:53 -0400)
committerAurelien Jarno <aurel32@debian.org>
Sat, 30 Sep 2023 08:31:05 +0000 (09:31 +0100)
commit55e76ebe141f761f3c1bd7a4c65e8e1fcce08ad4
tree3611d0654d3ba4b1bc97fc9ea539dd9acd7495a8
parenta4412e21a958dd0647f3d910edb40e662112c278
[PATCH v2] tunables: Terminate immediately if end of input is reached

The string parsing routine may end up writing beyond bounds of tunestr
if the input tunable string is malformed, of the form name=name=val.
This gets processed twice, first as name=name=val and next as name=val,
resulting in tunestr being name=name=val:name=val, thus overflowing
tunestr.

Terminate the parsing loop at the first instance itself so that tunestr
does not overflow.

Gbp-Pq: Topic any
Gbp-Pq: Name local-CVE-2023-4911.patch
elf/dl-tunables.c