Re: [PATCH v6 0/4] apei/ghes: don't OOPS with bad ARM error CPER records
From: Ard Biesheuvel
Date: Thu Jan 08 2026 - 10:36:32 EST
On Thu, 8 Jan 2026 at 12:35, Mauro Carvalho Chehab
<mchehab+huawei@xxxxxxxxxx> wrote:
>
> Rafael,
>
> Current parsing logic at apei/ghes for ARM Processor Error
> assumes that the record sizes are correct. Yet, a bad BIOS
> might produce malformed GHES reports.
>
> Worse than that, it may end exposing data from other memory
> addresses, as the logic may end dumping large portions of
> the memory.
>
> Avoid that by checking the buffer sizes where needed.
>
> ---
>
> v6:
> - No code changes, just a cosmetic change at patch 3 description
> - Added Jonathan's review on all patches
>
> v5:
> - Changed the name of a var as requested by Jonathan
>
> v4:
> - addressed Jonathan comments;
> - added two extra patches to prevent other OOM issues.
>
> v3:
> - addressed Shuai feedback;
> - moved all ghes code to one patch;
> - fixed a typo and a bad indent;
> - cleanup the size check logic at ghes.c.
>
> Mauro Carvalho Chehab (4):
> apei/ghes: ARM processor Error: don't go past allocated memory
> efi/cper: don't go past the ARM processor CPER record buffer
> apei/ghes: ensure that won't go past CPER allocated record
> efi/cper: don't dump the entire memory region
>
I've skimmed over this and it all looks reasonable to me
Acked-by: Ard Biesheuvel <ardb@xxxxxxxxxx>
Thanks for cleaning this up.