)]}'
{
  "commit": "dbb71d73b311be70b14e89a9b5f804efeae1637f",
  "tree": "1f31b44d97bc0218998a548641410cf569da2fe6",
  "parents": [
    "e09c333785b181335f70697c2bd41bf828e42dcd"
  ],
  "author": {
    "name": "Ard Biesheuvel",
    "email": "ardb@kernel.org",
    "time": "Wed Nov 26 17:26:28 2025 +0100"
  },
  "committer": {
    "name": "Ard Biesheuvel",
    "email": "ardb@kernel.org",
    "time": "Tue Dec 16 13:39:30 2025 +0100"
  },
  "message": "random: Plug race in preceding patch\n\nThe lockless get_random_uXX() routines locklessly read the next value\nfrom the respective linear buffer and then overwrite it with a 0x0\nvalue. This is racy, as the code might be re-entered by an interrupt\nhandler, and so the store might redundantly wipe the location accessed\nby the interrupt context rather than the interrupted context.\n\nTo plug this race, wipe the preceding location when reading the next\nvalue from the linear buffer. Given that the position is always non-zero\noutside of the critical section, this is guaranteed to be safe, and\nensures that the produced values are always wiped from the buffer.\n\nSigned-off-by: Ard Biesheuvel \u003cardb@kernel.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cf7305e9db9b656b522da09ff825f9a02d96cd71",
      "old_mode": 33188,
      "old_path": "drivers/char/random.c",
      "new_id": "514f893b0f6fd249a158b7e29a9b764b8ed7a8b4",
      "new_mode": 33188,
      "new_path": "drivers/char/random.c"
    }
  ]
}
