tree 7e0e56c4615796171982e43a412e34a68526faab
parent 244b12162bf4dcdce2cdf8c8cfedf0912c96ab07
author Namhyung Kim <namhyung@kernel.org> 1652470848 -0700
committer Steven Rostedt (Google) <rostedt@goodmis.org> 1653078513 -0400

libtraceevent: Check type string length in eval_type_str()

The pointer type check unconditionally accesses len - 2 and it could
be a problem when the given type string broken or malicious.  Also the
shortest supported type length is 2 (s8 and u8).  So let's check the
length first to prevent invalid access.

Actually this was found in a fuzzer test.

Link: https://lore.kernel.org/linux-trace-devel/20220513194048.476326-1-namhyung@kernel.org

Signed-off-by: Namhyung Kim <namhyung@kernel.org>
Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org>