Commit f62f8f2
committed
scsi: lpfc: Use memcpy() for BIOS version
jira VULN-72453
cve CVE-2025-38332
commit-author Daniel Wagner <[email protected]>
commit ae82eaf
The strlcat() with FORTIFY support is triggering a panic because it
thinks the target buffer will overflow although the correct target
buffer size is passed in.
Anyway, instead of memset() with 0 followed by a strlcat(), just use
memcpy() and ensure that the resulting buffer is NULL terminated.
BIOSVersion is only used for the lpfc_printf_log() which expects a
properly terminated string.
Signed-off-by: Daniel Wagner <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Reviewed-by: Justin Tee <[email protected]>
Signed-off-by: Martin K. Petersen <[email protected]>
(cherry picked from commit ae82eaf)
Signed-off-by: Roxana Nicolescu <[email protected]>1 parent 5519ed0 commit f62f8f2
1 file changed
+2
-2
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5922 | 5922 | | |
5923 | 5923 | | |
5924 | 5924 | | |
5925 | | - | |
5926 | | - | |
| 5925 | + | |
5927 | 5926 | | |
| 5927 | + | |
5928 | 5928 | | |
5929 | 5929 | | |
5930 | 5930 | | |
| |||
0 commit comments