These patches keep module EEPROM reads within the lengths reported by the
kernel. The netlink path now limits its copy to the received attribute,
and the ioctl path validates offset and length arithmetic before allocating
its response buffer.
Tested with make check in the default and --disable-netlink builds.
Prabhakar Pujeri (2):
netlink: module-eeprom: clamp data length to attribute payload size
ethtool: validate module EEPROM offset and length
ethtool.c | 9 ++++++++-
netlink/module-eeprom.c | 8 ++++++++
2 files changed, 16 insertions(+), 1 deletion(-)
--
2.55.0