Commit df5bc50
committed
scsi: lpfc: Use memcpy() for BIOS version
jira VULN-72453
cve CVE-2025-38332
commit-author Daniel Wagner <wagi@kernel.org>
commit ae82eaf
The strlcat() with FORTIFY support is triggering a panic because it
thinks the target buffer will overflow although the correct target
buffer size is passed in.
Anyway, instead of memset() with 0 followed by a strlcat(), just use
memcpy() and ensure that the resulting buffer is NULL terminated.
BIOSVersion is only used for the lpfc_printf_log() which expects a
properly terminated string.
Signed-off-by: Daniel Wagner <wagi@kernel.org>
Link: https://lore.kernel.org/r/20250409-fix-lpfc-bios-str-v1-1-05dac9e51e13@kernel.org
Reviewed-by: Justin Tee <justin.tee@broadcom.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
(cherry picked from commit ae82eaf)
Signed-off-by: Roxana Nicolescu <rnicolescu@ciq.com>1 parent ba88732 commit df5bc50
1 file changed
+2
-2
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5922 | 5922 | | |
5923 | 5923 | | |
5924 | 5924 | | |
5925 | | - | |
5926 | | - | |
| 5925 | + | |
5927 | 5926 | | |
| 5927 | + | |
5928 | 5928 | | |
5929 | 5929 | | |
5930 | 5930 | | |
| |||
0 commit comments