On Mon, Mar 2, 2026 at 7:22 AM Eelco Chaudron <[email protected]> wrote:

> Coverity reports a tainted scalar issue (CID 368760) in the
> log_received_backtrace() function. The function reads untrusted data
> from a file descriptor into a backtrace structure but only validates
> the upper bound of n_frames, not the lower bound. Fixes this by
> checking both lower and upper bound.
>
> Fixes: 759a29dc2d97 ("backtrace: Extend the backtrace functionality.")
> Signed-off-by: Eelco Chaudron <[email protected]>
> --
> v2:
>  - Use MIN(MAX()) instead of introducing CLAMP() macro.
>

Acked-by: Mike Pattrick <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to