From nobody Fri Apr 3 02:56:58 2026 Received: from ZRAP278CU002.outbound.protection.outlook.com (mail-switzerlandnorthazon11020095.outbound.protection.outlook.com [52.101.186.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 92DD32D47F1 for ; Tue, 17 Feb 2026 07:52:26 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.186.95 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771314747; cv=fail; b=AZrJPnBHr2ztQ1RNvWJqfJAIm7xpKMWURm7TPWuZRPjTv21F05JhgIAglGlEM4yG5z98S60Ibr0o+ZlLKoxmDEyxQzdnqBRLEK6mlkSdGHZ8e+g9YKvwJVYqYdd86opYMBt8wKrSuX+mjG+Q8nMYE+yE3xbJWyqsxYCPOGs3jho= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771314747; c=relaxed/simple; bh=dIEYvkTWJIuHERbSgJ72UYNB3q2kHsvV1oXpa2DmUz0=; h=From:To:Cc:Subject:Date:Message-Id:Content-Type:MIME-Version; b=JTEwdDaWxNdrGbCgl4kswaTaxwOjUhqKEomSD45PagShWMSUn71XS9DTnazkLsRg50bDvxf5l6GjSoqagEi2od6Wy1e15vQLMfF2UVY21d7G0pdltQ6Lbfax97ZpiV13hi3bepxLOQfUDk2HYv9i98VKH8wE6D4i8yyrqCXukKY= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=duagon.com; spf=pass smtp.mailfrom=duagon.com; dkim=pass (1024-bit key) header.d=duagon.com header.i=@duagon.com header.b=m4pkNI8J; arc=fail smtp.client-ip=52.101.186.95 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=duagon.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=duagon.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=duagon.com header.i=@duagon.com header.b="m4pkNI8J" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=FCpN8fuqknv3rW6zAgDpuyh0CwGwNu3JYL9VhumwPxjCrYy9zq4ZbV0uPDWPbmtwSBQXrVBtOwsrICd+RfK10WqPNoZmDUu58iFZHy83G5j8TW9Tgpf16JlB9kbwJ7OaZmVXm0lbAB/OxNkLN/VWQpfnoaPCr9PWbvlBRK83/1U823+w8aRw2wtSrijM1anCiooDlSh+zhhB+EZyJHNfkI0T+Mv918bvvHkTlE7gnmJ4Ust79r/zpumY5a0B17pdez/cqe4JDuwpQxXs6k1Z1+wx8pM26QKzTWLecVve+jRixPMeRC5MMp5wbn6j59dCIcoCllG/B0i62as+QkRhsA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Mu1qWWwnVZloTIRm3rP9X38SUnWJP1muZT2ntDazY7s=; b=DRQE3uuy/kT3VSky8A+DEWleWEFO9r9TkZ95L1Np1Jh975g6JynX12g6zVg5t6mUaPMvHEFJFOcphK8Tz6+Ku9Fj4XnhOLxvUhdmqgddbAFqTMWaIBMQpHIt48NB5TcxWsBsKK6L5jU0dXmTQNlRNKZVApUjnGBbZG8CatHYFhYPCG5RT+xNxJksy4Lsq4xLUypcqUrr4nMj06/pgCz0Eh6MRyML354M0Hyh4KzUD+FziQ+/P5IpHohuYs0D+g4whEXASNgKPU5NJLq3m7AzCY1aUaCqac+7a/NpIdUKTrXauPIoiw5G96sbpPeGYA8dFMx3SKif8FL55/DQg4PD4w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 40.93.85.27) smtp.rcpttodomain=gmail.com smtp.mailfrom=duagon.com; dmarc=pass (p=reject sp=reject pct=100) action=none header.from=duagon.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=duagon.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Mu1qWWwnVZloTIRm3rP9X38SUnWJP1muZT2ntDazY7s=; b=m4pkNI8JYYB0ig/CyRF/IiSd7AD9KGzzYSBR83v22wpo/yKpvdfEqRF3AhuAFXjt3ZKTKgjc25+k1DNDdFpFDvXEMASGJqwRDCz+18mT2GmvxEEkUNPfr+soV7T2R1i/Bx/bF0yPZFvH04q+8tx3/CyUKGU8tlGWzxEm0mnZcyA= Received: from DUZPR01CA0109.eurprd01.prod.exchangelabs.com (2603:10a6:10:4bb::28) by ZRAP278MB0030.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:14::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.16; Tue, 17 Feb 2026 07:52:22 +0000 Received: from DU6PEPF0000A7E0.eurprd02.prod.outlook.com (2603:10a6:10:4bb:cafe::7a) by DUZPR01CA0109.outlook.office365.com (2603:10a6:10:4bb::28) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.13 via Frontend Transport; Tue, 17 Feb 2026 07:52:22 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 40.93.85.27) smtp.mailfrom=duagon.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=duagon.com; Received-SPF: Pass (protection.outlook.com: domain of duagon.com designates 40.93.85.27 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.85.27; helo=ZRZP278CU001.outbound.protection.outlook.com; pr=C Received: from hz-deliver01.de.seppmail.cloud (162.55.72.219) by DU6PEPF0000A7E0.mail.protection.outlook.com (10.167.8.39) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9632.12 via Frontend Transport; Tue, 17 Feb 2026 07:52:22 +0000 Received: from hz-glue03.de.seppmail.cloud (unknown [10.11.0.9]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by hz-deliver01.de.seppmail.cloud (Postfix) with ESMTPS id 4fFX116vdsz4wvs; Tue, 17 Feb 2026 08:52:21 +0100 (CET) Received: from hz-glue03.de.seppmail.cloud (unknown [172.18.0.7]) by hz-glue03.de.seppmail.cloud (Postfix) with ESMTP id 4fFX116hHtz1yYP; Tue, 17 Feb 2026 08:52:21 +0100 (CET) X-SEPP-Suspect: 2647762cc63847abb251ddae38893c4f Received: from hz-scan03.de.seppmail.cloud (unknown [10.11.0.33]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by hz-glue03.de.seppmail.cloud (Postfix) with ESMTPS id 4fFX1167KFz1yWW; Tue, 17 Feb 2026 08:52:21 +0100 (CET) Received: from hz-scan03 (localhost [127.0.0.1]) by hz-scan03.de.seppmail.cloud (Postfix) with SMTP id 4fFX115VXhz2XJq; Tue, 17 Feb 2026 08:52:21 +0100 (CET) Received: from hz-m365gate03.de.seppmail.cloud (unknown [10.11.0.36]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by hz-scan03.de.seppmail.cloud (Postfix) with ESMTPS; Tue, 17 Feb 2026 08:52:20 +0100 (CET) Received: from ZRZP278CU001.outbound.protection.outlook.com (mail-switzerlandnorthazlp17011027.outbound.protection.outlook.com [40.93.85.27]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (secp384r1) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (not verified)) by hz-m365gate03.de.seppmail.cloud (Postfix) with ESMTPS id 4fFX101jCLz1xLY; Tue, 17 Feb 2026 08:52:20 +0100 (CET) Received: from ZR0P278MB1218.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:80::5) by ZRH2PFAD84B9AF9.CHEP278.PROD.OUTLOOK.COM (2603:10a6:918::220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.16; Tue, 17 Feb 2026 07:52:17 +0000 Received: from ZR0P278MB1218.CHEP278.PROD.OUTLOOK.COM ([fe80::311:4b5c:48da:9514]) by ZR0P278MB1218.CHEP278.PROD.OUTLOOK.COM ([fe80::311:4b5c:48da:9514%5]) with mapi id 15.20.9611.013; Tue, 17 Feb 2026 07:52:17 +0000 From: Filip Jensen To: morbidrsa@gmail.com Cc: linux-kernel@vger.kernel.org, Filip Jensen , Jose Javier Rodriguez Barbarin Subject: [PATCH] mcb: fix kasan read slab out of bounds Date: Tue, 17 Feb 2026 08:51:24 +0100 Message-Id: <20260217075124.10052-1-dev-Felipe.Jensen@duagon.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: MA2P292CA0008.ESPP292.PROD.OUTLOOK.COM (2603:10a6:250:1::13) To ZR0P278MB1218.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:80::5) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-TrafficTypeDiagnostic: ZR0P278MB1218:EE_|ZRH2PFAD84B9AF9:EE_|DU6PEPF0000A7E0:EE_|ZRAP278MB0030:EE_ X-MS-Office365-Filtering-Correlation-Id: ebc971c4-6624-4d46-ea73-08de6df97bd1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|366016|376014|52116014|1800799024|38350700014; X-Microsoft-Antispam-Message-Info-Original: =?us-ascii?Q?z61xrWSXl4xcdzWAzSzqkesxOrIvNCbxBCxrtnJV9qWxqCOvzokwA2JBXaMx?= =?us-ascii?Q?DLyCaguDe4i+wJGoMagSJqt2aRejh6yh2IYN+oMrX8ssYjKUXXHWNyRj0uGa?= =?us-ascii?Q?caTxFByq0+rUO2ZCYDoyDE2EKIMpOf+IODahrR7nctR7J6K71WePmpYnuH98?= =?us-ascii?Q?Nwxf5durl+H8IolEk6/cgE8y7+hFtChAPCr1886E+8ragQpRNrjZ6c1Wcufn?= =?us-ascii?Q?WFlJrqtuRF/MrTXZAJdENKy4MRZWdnVHxge2ko+X2iWKV1uCdont65d9JMFV?= =?us-ascii?Q?0AYLPvQge36xd2YHPxX8u6MWuIbzHOwNyPjjcTtx+/6delNjRrxYGKCSC3rk?= =?us-ascii?Q?B8orK2/P7s2rXT/o3nMJFX8Wb0aBreuCQCWe31qflD8vlTaJfmCUmnO8frkV?= =?us-ascii?Q?o7FSSJUchGqGTsEki+lgmNxwygO5habNvO3KW519vAdvY1E1RnWpPED2cawn?= =?us-ascii?Q?aqvYwIMPFSlvGJF5oAZzpiTzIZanFlIMGplyWJPBHtLZ4B6vFTCvFiSlgwmi?= =?us-ascii?Q?JK0j1rLE8jaRC2TkeowCRRjc/r5Z3ygpbM2MZiLSTpHKCLIwgmaJUHMbZdxZ?= =?us-ascii?Q?GPbNkZQ4j9PHOoZrNzaY90oafxhI2en1drBXFZDLL09/WSpc0aMPiSGTD7QO?= =?us-ascii?Q?dgDSyz0bixfEBKL6A9lLgqOWKfru/XCZus5XSOQucv3Jst3fvlDXiqMIbF5R?= =?us-ascii?Q?gMiJhDCZdiYmcdsC96c+jAoIRQvv9mxhIq0cjI14RLjmW7VO4gsTFSct4b4s?= =?us-ascii?Q?7hRI0LPuChU/FmXco3YaHv+X10HQ+Rzht6xECJhLgcAEXU+hc5bYAdHv41tA?= =?us-ascii?Q?HYhy3a5CTVTZnuFQsbqjIzDkJCPUdFaVipoFwRfVMFOhXLj1YyWrob5sd8Zs?= =?us-ascii?Q?4lOc3SBfY6TRJqVo7V9M7V7lfvFgiZw7A3L+h030ODhHdyGhGlkfG1sUCzKc?= =?us-ascii?Q?BaT8Ug2X/IbooZfNETXOSjDnBSINpqy+ljBA/WkyH2wrdrr+RSagEPLw659r?= =?us-ascii?Q?I/T4ikVHVni/SYIUA0BSO0S46FWjKoz7B7DiWDq4agpNEkwO0sASmHKPSW92?= =?us-ascii?Q?t1rgMgOukcdAQtvAwul3eeysNVX8D/5RFT7vjv4W6oUE619qDvMZELxBZhR/?= =?us-ascii?Q?yHIEjn9iHjWL33XnT6GRg2e/GVscSPRnsuD3TtO3Nny9QfwWC3YI8MLr7boc?= =?us-ascii?Q?ov7lNngcPhdZZADUo4rkTjoPr3gWHRO59bTjxE6TeAET4llbbe5LpcFtUvO6?= =?us-ascii?Q?icIZMcpShSJE/KixoF0RoH4/6McTPLZgby0kSHVCXwAegpo5Ldp0mR69I2fR?= =?us-ascii?Q?D5WBfBD0fdZB6NAFT9qcFA78RNfAu1w5PWDXjavqPanUm8piI8JY/9UYY0Gb?= =?us-ascii?Q?AFDszqGP9ZXiq84EdOwQ2ZJu5I82g3h16eSD3tkSSBjko2yFHwr3nSJl/Jbn?= =?us-ascii?Q?i7/KTFVBhkwMwOoVYYzbDjHA9TfelKp5LKvCWSgaFqyJgrn0yZ+uZe+txbVx?= =?us-ascii?Q?T0nEpCkeqUn70EZV+q0K3O23/A+kQ3CfmDKOS7HCofzZLy/1Pk+HkckGWfV4?= =?us-ascii?Q?1rbcu77DTG544kN7HRembZzQADoeTyWDtHebuJCdTRfwwaKhnU0ciOTDlVN+?= =?us-ascii?Q?1mgNz9PS1S37ewAz65vOO98=3D?= X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:ZR0P278MB1218.CHEP278.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(52116014)(1800799024)(38350700014);DIR:OUT;SFP:1102; X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZRH2PFAD84B9AF9 X-SEPP-CCCVersion: 2025-12-11T08:12:51+01:00 9ed91da2 X-EOPAttributedMessage: 0 X-MS-Exchange-SkipListedInternetSender: ip=[40.93.85.27];domain=ZRZP278CU001.outbound.protection.outlook.com X-MS-Exchange-ExternalOriginalInternetSender: ip=[40.93.85.27];domain=ZRZP278CU001.outbound.protection.outlook.com X-MS-Exchange-Transport-CrossTenantHeadersStripped: DU6PEPF0000A7E0.eurprd02.prod.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 7eaf0470-cc10-4192-4bda-08de6df9786e X-SM-ruleversion: 2.1.0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|36860700013|35042699022|82310400026|156008|1800799024|14060799003; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?uvl9y7CIRvYQm2XVjZ78JUvzCrFIgK4zCh98hOgsABVmLprc6gRf1+rMKeXk?= =?us-ascii?Q?K7zInpOKeeL0huL2yMUB9q0QdNgZK5vdXneMhZ/bvfmn2Oqe7hawrTDvqnKh?= =?us-ascii?Q?uA2W73tqlvnLsdDFnygL2Wjo1rjXaQpZ+SRYikp80qqCfnxTRfe01qy9P6Hc?= =?us-ascii?Q?ikqdNCMDptjof+qTU1mHClHVTd3qpqfO+cYcWfRNV9LcjJcsQBvqiUhxvi8c?= =?us-ascii?Q?xKCUmkTSwlJa7iL7tfnWnOz4v1pYBbtndEzAOu2gX8WzjnOASBaTzjPFiN0a?= =?us-ascii?Q?8D6e4NWnx+qpsler26kzXR3m2cRVaiEM1n2vlrLNnqScyBFIjoW2tNwHF9xU?= =?us-ascii?Q?FTJ77A+zN5DLOaFFt4rVYMF+FsUK7BqGArlPDZ5BaYUMRe4GXuTCVMbq15t3?= =?us-ascii?Q?xq7k0tAxXJYAQ1eUuuwD5AUtC7iAMK6mOoGF1N12lwR/glYkxKL71Rnl+mmb?= =?us-ascii?Q?+Dirv51z98nhq6T04msWHzhlxs3LrDQaYHFTOCYVR8Ugtsr9nAppDSu8etgh?= =?us-ascii?Q?YbfS1uxNvoZr9BuegxJ9rA9W4iIYUz3HIez2/7MS9hWdPedg/DWo1UBCC1UR?= =?us-ascii?Q?mV4zv6XYglpX4osPdKcGS2thTBFwfQ6+Mod3kNpV+s1jXOQ469loxac3h5pg?= =?us-ascii?Q?uNYd0tPw1Sq2jD58FABU5kG5cV3l4RTqGER/gc6LlBjQ9XRTyYxyQN2wKCtI?= =?us-ascii?Q?DtDAlfHUV3hddjlYTt0D99+Onnnnp11c8Se+rcsXEWovqgptY/k3Z2iayJOD?= =?us-ascii?Q?rjgJjbc7lpPbEfurmcSU9x+QMCR33Qp6PAW76YzB48SiGylsOB409CmWTH5Q?= =?us-ascii?Q?WRNAFtHXO/CEMiaMDIdDKUJfoLdc7RRwPAsEoG6ftxabn+XvrkGJKkQ4S7Dg?= =?us-ascii?Q?tGUlA6QdBsnKiVDQ4XYyoUoVgySTv+OrdBqW+nFwkK2u5CefaKHePsy23C0C?= =?us-ascii?Q?mLHkq1Ieh13zmMGVekCWCHPGv5JR7tUavh+Wq4uSHs10yOe2iZNO48ilpa3q?= =?us-ascii?Q?5+owvgoyNlBxXYpb7tfApydsRIRIOOIEDyL09GZtToXR7mzkU6jyNI56HMvz?= =?us-ascii?Q?pZ2miIj0kFcWSzjrRQyfLrl2mVCubbxhVxcN8r92Tu+/oRxu2SDIuDWuiA09?= =?us-ascii?Q?bNnx+P9fxrzj?= X-Forefront-Antispam-Report: CIP:162.55.72.219;CTRY:CH;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:ZRZP278CU001.outbound.protection.outlook.com;PTR:mail-switzerlandnorthazlp17011027.outbound.protection.outlook.com;CAT:NONE;SFS:(13230040)(376014)(36860700013)(35042699022)(82310400026)(156008)(1800799024)(14060799003);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: KxLlngCIO5qPkh1HU4Y/6Fu6+ukMvyu3hR+mNIxsU5gopClZtqWEWkch4iP2FJ+U2Lt1jKzdBsoAF7ph4jWwmT3rAQX7dJAqDbNv2dUIq/eCd3L5oCk47ljSnSVD1zBnbuRzVH3kqDR0+9alPnfElIX8hSVWYKnPleENLK1xJsvO967CtdNK4RMroO6HzLxi4CJ5wB/abeZ3Fgg2tLLDzSrT+8Cdx/Gwcz+HnBZnvNgoC/Pra4+WH/sQC7QO1NhHEK6IByBza5eOSOH+02i1Hicg3PBAILKHtoC/H6+4cm6CyQBZVSFUXfzC48NDVHkVUOT6PLjdw0XJ5V8goSQThrrTMF7pA+1M5BPFca4avG7c6b5CtApDNLwRd5/6OIy9SoGAMohQBmFpkggBQwiFAPgMU2CyIjDuCdKR7FW85oT4VSE5R2jwENnY3Vt1pNir X-OriginatorOrg: duagon.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Feb 2026 07:52:22.3562 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ebc971c4-6624-4d46-ea73-08de6df97bd1 X-MS-Exchange-CrossTenant-Id: e5e7e96e-8a28-45d6-9093-a40dd5b51a57 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e5e7e96e-8a28-45d6-9093-a40dd5b51a57;Ip=[162.55.72.219];Helo=[hz-deliver01.de.seppmail.cloud] X-MS-Exchange-CrossTenant-AuthSource: DU6PEPF0000A7E0.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZRAP278MB0030 Content-Type: text/plain; charset="utf-8" Fixes the following kasan bug report reproducible when probing the driver: slab-out-of-bounds in string_nocheck lib/vsprintf.c:655 slab-out-of-bounds in string+0x396/0x440 lib/vsprintf.c:737 Read of size 1 at addr ffff88810dd32f94 by task modprobe/661 It is caused for passing snprintf a not null terminated string as a parameter but in the format string expecting one ("%s"), thus making it read pass the valid data. Another solution could be giving a length to the snprintf parameter: snprintf(bus->name,CHAMELEON_FILENAME_LEN + 1,"%.*s",CHAMELEON_FILENAME_LEN,header->filename); However, this solution seems less readable and since there is no need to format the input, apart from converting it into a right C string, a simple memcpy is here proposed. Reviewed-by: Jose Javier Rodriguez Barbarin Signed-off-by: Filip Jensen --- drivers/mcb/mcb-parse.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mcb/mcb-parse.c b/drivers/mcb/mcb-parse.c index bf0d7d58c8b0..85dba7ec1409 100644 --- a/drivers/mcb/mcb-parse.c +++ b/drivers/mcb/mcb-parse.c @@ -201,8 +201,8 @@ int chameleon_parse_cells(struct mcb_bus *bus, phys_add= r_t mapbase, bus->revision =3D header->revision; bus->model =3D header->model; bus->minor =3D header->minor; - snprintf(bus->name, CHAMELEON_FILENAME_LEN + 1, "%s", - header->filename); + memcpy(bus->name, header->filename, CHAMELEON_FILENAME_LEN); + bus->name[CHAMELEON_FILENAME_LEN] =3D '\0'; =20 bar_count =3D chameleon_get_bar(&p, mapbase, &cb); if (bar_count < 0) { --=20 2.34.1