mdio-tools: backport segfault fix

Return an ENOMEM error when the buffer is too small to perform the operation.

Before:
$ mdio mt7530-0 0x05:31 dump 0x0+512
Segmentation fault

After:
$ mdio mt7530-0 0x05:31 dump 0x0+512
ERROR: Dump operation failed (-12)

Signed-off-by: Aleksander Jan Bajkowski <[email protected]>

diff --git a/net/mdio-tools/Makefile b/net/mdio-tools/Makefile
index d5e7798b5152dd90de578d237e9af65cff1b493d..5f6720ade088c08ab21b84eb2b372029b88942d4 100644 (file)
--- a/net/mdio-tools/Makefile
+++ b/net/mdio-tools/Makefile
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=mdio-tools
 PKG_VERSION:=1.3.1
-PKG_RELEASE:=2
+PKG_RELEASE:=3
 
 PKG_SOURCE_URL:=https://github.com/wkz/mdio-tools
 PKG_SOURCE_PROTO:=git

diff --git a/net/mdio-tools/patches/0001-mdio-fix-segmentation-fault-in-dump-operation.patch b/net/mdio-tools/patches/0001-mdio-fix-segmentation-fault-in-dump-operation.patch
new file mode 100644 (file)
index 0000000..e810c42
--- /dev/null
+++ b/net/mdio-tools/patches/0001-mdio-fix-segmentation-fault-in-dump-operation.patch
@@ -0,0 +1,34 @@
+From d7e314e45c112198d15220333b869604478a2e49 Mon Sep 17 00:00:00 2001
+From: Aleksander Jan Bajkowski <[email protected]>
+Date: Sun, 28 Sep 2025 23:31:00 +0200
+Subject: [PATCH] mdio: fix segmentation fault in dump operation
+
+Return an ENOMEM error when the buffer is too small to
+perform the operation.
+
+Before:
+$ mdio mt7530-0 0x05:31 dump 0x0+512
+Segmentation fault
+
+After:
+$ mdio mt7530-0 0x05:31 dump 0x0+512
+ERROR: Dump operation failed (-12)
+
+Fixes: 882488711ca0 ("mdio: Add common dump operation to read ranges of registers")
+Signed-off-by: Aleksander Jan Bajkowski <[email protected]>
+---
+ src/mdio/mdio.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+--- a/src/mdio/mdio.c
++++ b/src/mdio/mdio.c
+@@ -613,6 +613,9 @@ int mdio_xfer_timeout(const char *bus, s
+       struct nlmsghdr *nlh;
+       int err;
+ 
++      if (prog->len * sizeof(*prog->insns) > len)
++              return -ENOMEM;
++
+       nlh = msg_init(MDIO_GENL_XFER, NLM_F_REQUEST | NLM_F_ACK);
+       if (!nlh)
+               return -ENOMEM;