Re: (subset) [PATCH] mfd: ipaq-micro: Fix out-of-bounds stack read in ipaq_micro_str
From: Lee Jones
Date: Thu Jun 18 2026 - 06:28:42 EST
On Wed, 10 Jun 2026 16:03:52 -0700, Dmitry Torokhov wrote:
> ipaq_micro_str() decodes a UTF-16LE string into an ASCII string.
> It copies characters to a stack buffer retstr, but fails to
> null-terminate it. When kstrdup() is called on retstr, it can read past
> the buffer into uninitialized stack memory, potentially leaking stack
> contents.
>
> Fix this by initializing retstr to zero.
>
> [...]
Applied, thanks!
[1/1] mfd: ipaq-micro: Fix out-of-bounds stack read in ipaq_micro_str
commit: 12d6d600e93bb15006109df42983d1236bb99a50
--
Lee Jones [李琼斯]