diff options
| author | Yudi Yang <2000jedi@gmail.com> | 2026-09-01 14:55:11 -0500 |
|---|---|---|
| committer | Heiko Stuebner <heiko@sntech.de> | 2026-09-03 15:59:56 +0200 |
| commit | bc69439d983cc491cc86e01fafc1deb94e1bb85e (patch) | |
| tree | 6d8597eacdb8fd0d7c20b4d6c01a201fa31a7a59 /scripts | |
| parent | d3609b540838945ab2ca5b65f32a2eb67bb284c8 (diff) | |
| download | linux-stable-bc69439d983cc491cc86e01fafc1deb94e1bb85e.tar.gz linux-stable-bc69439d983cc491cc86e01fafc1deb94e1bb85e.zip | |
drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree
path into a 32-byte stack buffer. Device tree paths are not limited to
this size, so a sufficiently long path can overflow the buffer.
Use snprintf() with the destination size to truncate the generated name
and keep the writes within bounds.
Fixes: 729f8eefdcad ("drm/rockchip: analogix_dp: Add support for RK3588")
Cc: stable@vger.kernel.org
Signed-off-by: Yudi Yang <2000jedi@gmail.com>
Signed-off-by: Heiko Stuebner <heiko@sntech.de>
Link: https://patch.msgid.link/20260901195511.2761251-1-2000jedi@gmail.com
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions