hwrng: core - Add WARN_ON for buggy read return values
authorHerbert Xu <herbert@gondor.apana.org.au>
Mon, 23 Sep 2024 06:05:52 +0000 (14:05 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Sat, 5 Oct 2024 05:22:05 +0000 (13:22 +0800)
commitfb10c7a84661471cdcc8998d63703211b873c126
tree510276d63537634d6c238b4c8d62832ce6e0be9a
parent98091a826873bc5c114455f474121b67907e98ab
hwrng: core - Add WARN_ON for buggy read return values

If a buggy driver returns a length that is longer than the size
of the buffer provided to it, then this may lead to a buffer overread
in the caller.

Stop this by adding a check for it in the hwrng core.

Reported-by: Guangwu Zhang <guazhang@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/char/hw_random/core.c