Ben Levinsky f7c918bf07 rpmsg: rpc: Validate client request lengths ...

The RPC client copies caller-provided parameters into a fixed-size
stack buffer without checking whether the complete request fits.
Oversized requests can therefore overwrite the caller's stack frame.

Reject requests that exceed the remaining parameter capacity before
copying them, validate nonempty parameter pointers, and document the
public API limit.

Signed-off-by: Ben Levinsky <ben.levinsky@amd.com>
Assisted-by: Codex:GPT-5

2026-09-21 09:54:50 +02:00

..

rpmsg/rpc

rpmsg: rpc: Validate client request lengths

2026-09-21 09:54:50 +02:00