Skip to content

Conversation

@firmware-kpd
Copy link

@firmware-kpd firmware-kpd bot commented Jul 23, 2025

Pull request for series with
subject: firmware_loader: prevent integer overflow in firmware_loading_timeout()
version: 1
url: https://patchwork.kernel.org/project/firmware/list/?series=978825

@firmware-kpd
Copy link
Author

firmware-kpd bot commented Jul 23, 2025

Upstream branch: 0af2f6b
series: https://patchwork.kernel.org/project/firmware/list/?series=978825
version: 1

@firmware-kpd firmware-kpd bot force-pushed the driver-core-next_base branch 2 times, most recently from fb12db5 to 877b8a7 Compare August 11, 2025 05:36
In firmware_loading_timeout(), *int* result of __firmware_loading_timeout()
multiplied by HZ might overflow before being implicitly cast to *long* when
being returned. Rewrite the function using check_mul_overflow() and capping
the result at LONG_MAX on actual overflow...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Signed-off-by: Sergey Shtylyov <s.shtylyov@omp.ru>
Cc: stable@vger.kernel.org
Reviewed-by: Luis Chamberlain <mcgrof@kernel.org>
@firmware-kpd
Copy link
Author

firmware-kpd bot commented Aug 13, 2025

Upstream branch: 8f5ae30
series: https://patchwork.kernel.org/project/firmware/list/?series=978825
version: 1

@firmware-kpd firmware-kpd bot force-pushed the series/978825=>driver-core-next branch from ff17967 to ce72f6c Compare August 13, 2025 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant