Re: [PATCH v2] platform/x86: ibm_rtl: Fix potential OOB read at signature search

[Ilpo Järvinen]

On Wed, 21 Oct 2026 08:39:55 +0200, Takashi Iwai wrote:

> The loop for signature search fetches 22 bytes of struct ibm_rtl_table
> at each check, while the loop count is calculated in 4 bytes unit,
> which means that, at the last entry, it fetches over the limit.
> 
> Rewrite the loop to use the byte offset and correct the boundary
> condition check for avoiding the potential OOB access.
> 
> [...]

Thank you for your contribution, it has been applied to my local
review-ilpo-next branch. Note it will show up in the public
platform-drivers-x86/review-ilpo-next branch only once I've pushed my
local branch there, which might take a while.

FYI [if applicable to your patch], as per Linus' policy change, also
fixes are mostly routed through for-next unless the fix is for a
commit introduced in the most recent cycle or is clearly a regression
fix.

The list of commits applied:
[1/1] platform/x86: ibm_rtl: Fix potential OOB read at signature search
      commit: f1d81af2521ad504a20481fef12c358d26e6c3a6

--
 i.