[PATCH v2 0/2] lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()

From: Vincent Mailhol

Date: Thu Jul 23 2026 - 15:44:37 EST


This series fixes an off-by-one out-of-bounds read in ucs2_strnlen().

The first patch is the real fix, the second patch comes as a bonus and
fixes the code indentation.

Signed-off-by: Vincent Mailhol <mailhol@xxxxxxxxxx>
---
Changes in v2:

- Toggle the patch order. ucs2_strnlen() is now before the
tabulation fix to make it easier to backport.

- Add Cc: stable on the ucs2_strnlen().

Link to v1: https://lore.kernel.org/r/20260722-fix-ucs2_strnlen-v1-0-ba5bade2b026@xxxxxxxxxx

---
Vincent Mailhol (2):
lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()
lib/ucs2_string.c: fix indentation

lib/ucs2_string.c | 38 +++++++++++++++++++-------------------
1 file changed, 19 insertions(+), 19 deletions(-)
---
base-commit: 1590cf0329716306e948a8fc29f1d3ee87d3989f
change-id: 20260722-fix-ucs2_strnlen-145f5d4b1f6b

Best regards,
--
Vincent Mailhol <mailhol@xxxxxxxxxx>