The histogram expression and trace injection paths derive allocation sizes from unbounded strings or field metadata. This series bounds histogram formatting, validates user-event field declarations and injection allocation sizes, and protects dynamic string growth.
The first two patches validate metadata at the producer and consumer boundaries. The last two tighten trace injection allocation checks, including events with no user fields. Li Qiang (4): tracing/hist: Prevent overflow in histogram expression strings tracing/user_events: Validate explicit struct field sizes tracing/inject: Validate entry allocation size tracing/inject: Prevent overflow growing string fields kernel/trace/trace_events_hist.c | 89 ++++++++++++++++++++---------- kernel/trace/trace_events_inject.c | 34 ++++++++++-- kernel/trace/trace_events_user.c | 16 ++++-- 3 files changed, 99 insertions(+), 40 deletions(-) base-commit: b95f03f04d475aa6719d15a636ddf32222d55657 -- 2.43.0
