Re: [PATCH v6 01/10] of: fix out-of-bounds read in of_alias_scan() stem parser
From: Rob Herring (Arm)
Date: Thu Aug 27 2026 - 10:36:28 EST
On Wed, 05 Aug 2026 13:31:00 -0700, Abdurrahman Hussain wrote:
> The stem parser tests isdigit(*(end - 1)) before checking end > start
> and so reads one byte before the property name when the name is empty
> or all digits. Check the bound first.
>
> Fixes: 611cad720148 ("dt: add of_alias_scan and of_alias_get_id")
> Cc: stable@xxxxxxxxxxxxxxx
> Assisted-by: Claude:claude-fable-5 [Claude Code]
> Signed-off-by: Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
> ---
> drivers/of/base.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
Applied, thanks!