linux/drivers/platform
Vladimir Moskovkin 60bd13f8c4 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
commit 4e89a40774 upstream.

If the 'buf' array received from the user contains an empty string, the
'length' variable will be zero. Accessing the 'buf' array element with
index 'length - 1' will result in a buffer overflow.

Add a check for an empty string.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: e8a60aa740 ("platform/x86: Introduce support for Systems Management Driver over WMI for Dell Systems")
Cc: stable@vger.kernel.org
Signed-off-by: Vladimir Moskovkin <Vladimir.Moskovkin@kaspersky.com>
Link: https://lore.kernel.org/r/39973642a4f24295b4a8fad9109c5b08@kaspersky.com
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-06-04 14:40:21 +02:00
..
chrome platform/chrome: cros_ec_typec: fix missing fwnode reference decrement 2024-12-14 19:54:02 +01:00
goldfish platform: goldfish: pipe: Use platform_get_irq() to get the interrupt 2022-03-18 13:55:21 +01:00
loongarch platform/loongarch: laptop: Fix possible UAF and simplify generic_acpi_laptop_init() 2022-10-29 16:29:31 +08:00
mellanox platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources 2024-07-25 09:49:15 +02:00
mips platform: mips: cpu_hwmon: Disable driver on unsupported hardware 2024-08-03 08:49:43 +02:00
olpc platform/olpc: Fix uninitialized data in debugfs write 2022-07-28 20:40:15 +02:00
surface platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 2024-09-18 19:23:03 +02:00
x86 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() 2025-06-04 14:40:21 +02:00
Kconfig LoongArch: Add ACPI-based generic laptop driver 2022-10-12 16:36:20 +08:00
Makefile LoongArch: Add ACPI-based generic laptop driver 2022-10-12 16:36:20 +08:00