Thread (2 messages) flat view 2 messages, 2 authors, 16d ago

Re: [PATCH] drm/rockchip: analogix_dp: bound endpoint name formatting

From: Heiko Stuebner <heiko@sntech.de>
Date: 2026-09-03 14:12:26
Also in: dri-devel, linux-rockchip, lkml, stable

On Tue, 01 Sep 2026 14:55:11 -0500, Yudi Yang wrote:
rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree
path into a 32-byte stack buffer. Device tree paths are not limited to
this size, so a sufficiently long path can overflow the buffer.

Use snprintf() with the destination size to truncate the generated name
and keep the writes within bounds.

[...]
Applied, thanks!

[1/1] drm/rockchip: analogix_dp: bound endpoint name formatting
      commit: bc69439d983cc491cc86e01fafc1deb94e1bb85e

Best regards,
-- 
Heiko Stuebner [off-list ref]
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help