This series fixes two security issues in trace-event-read.c: 1. Stack buffer overflow in read_string() when a string exceeds BUFSIZ, due to a missing bounds check.
2. Integer truncation when passing 64-bit sizes into functions using 'int' parameters, causing uninitialized memory to be dumped and parsers to read out of bounds. Both are pre-existing bugs; this series fixes them. Changes in v2: - Added new patch to fix integer truncation in do_read() and skip(). - Organized as patch series to separate the two security fixes. v1: https://lore.kernel.org/linux-perf-users/[email protected]/ Tanushree Shah (2): perf trace-event: Fix buffer overflow in read_string() perf trace-event: Fix integer truncation in do_read() and skip() tools/perf/util/trace-event-read.c | 33 +++++++++++++++++------------- 1 file changed, 19 insertions(+), 14 deletions(-) -- 2.47.3
