Re: [PATCH v3 05/10] ACPI: extlog: Validate PCIe error section length before payload access
Alison Schofield <[email protected]>
| Newsgroups | org.kernel.vger.linux-acpi,org.kernel.vger.linux-cxl |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Jul 17, 2026 at 09:16:42AM -0700, Dave Jiang wrote: > sashiko-bot flagged the missing section-length check before > extlog_print_pcie() touches the PCIe payload. > > extlog_print_pcie() reads pcie_err->validation_bits and device_id and > copies the 96-byte aer_info buffer without checking that > gdata->error_data_length is large enough for a struct cper_sec_pcie. > cper_estatus_check() keeps the read within the estatus block, but a > short section still lets stale adjacent bytes be treated as PCIe error > data. Reject a section too small to hold the record before touching any > field. > > Reported-by: [email protected] > Fixes: e778ffefa34d ("ACPI: extlog: Trace CPER PCI Express Error Section") > Assisted-by: Claude:claude-opus-4-8 > Signed-off-by: Dave Jiang <[email protected]> Reviewed-by: Alison Schofield <[email protected]>