MarvellEmbeddedProcessors/mvpp2x-marvell

buffer overflow in memset function in MVPPx-tsn driver

Opened this issue · 0 comments

struct mv_pp2x_cls_c2_entry c2_entry;
...
else if (!strcmp(name, "act_sw_clear"))
memset(&c2_entry, 0, sizeof(struct mv_pp2x_c2_add_entry));

c2_entry is of the type struct mv_pp2x_cls_c2_entry clearly, we’re zeroing more memory than the destination struct size.