Re: CVE-2022-49444: module: fix [e_shstrndx].sh_size=0 OOB access

[Brendan Jackman]

> It is trivial to craft a module to trigger OOB access in this line:

Requires loading a crafted module?  I don't think there's any coherent threat
model where this is a vuln. Probably a CVE to revoke?

Unless there's some detail I'm not aware of, e.g. this bit of the module isn't
signed or something.

Cheers,
Brendan