*** This bug is a duplicate of bug 1931843 ***
    https://bugs.launchpad.net/bugs/1931843

** This bug has been marked a duplicate of bug 1931843
   Update mlx-bootctl to access new fields in EEPROM MFG

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-bluefield in Ubuntu.
https://bugs.launchpad.net/bugs/1931981

Title:
  mlx-bootctl: Fix potential buffer overflow

Status in linux-bluefield package in Ubuntu:
  New

Bug description:
  SRU Justification:

  [Impact]
  The sysfs store/show functions use sprintf without specifying a size which 
could lead to potential buffer overflow.

  [Fix]
  Replace sprintf with snprintf to avoid buffer overflow. Also, remove the 
redundant strlen usage since count is already available in the _store functions.

  [Test Plan]
  Read/write access to the EEPROM MFG fields can be tested via the sysfs 
entries that are exposed by the driver. Please note that the MFG partition is 
locked in order to protect the data and this could block all writes to it. In 
order to enable writes to the EEPROM, the MFG Info needs to be reset via the 
UEFI Device Manager.

  [Regression Potential]
  Can be considered minimum.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/1931981/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to