[PATCH v2] tunables: Terminate immediately if end of input is reached
authorSiddhesh Poyarekar <siddhesh@redhat.com>
Mon, 11 Sep 2023 22:53:15 +0000 (18:53 -0400)
committerRaspbian forward porter <root@raspbian.org>
Thu, 15 Feb 2024 22:29:51 +0000 (22:29 +0000)
commitfb7b52fff0bf0e1ba4030467471dbb97c6211412
treedf8943d454f390801318f7a5b29f8667fc7d2889
parent94f5c2d5dd12a622cdc317c288647039db1203fc
[PATCH v2] tunables: Terminate immediately if end of input is reached

The string parsing routine may end up writing beyond bounds of tunestr
if the input tunable string is malformed, of the form name=name=val.
This gets processed twice, first as name=name=val and next as name=val,
resulting in tunestr being name=name=val:name=val, thus overflowing
tunestr.

Terminate the parsing loop at the first instance itself so that tunestr
does not overflow.

Gbp-Pq: Topic any
Gbp-Pq: Name local-CVE-2023-4911.patch
elf/dl-tunables.c