)]}'
{
  "commit": "fac634087ad85d2c6845cf3ead4fbf520274ca49",
  "tree": "5abc06fff475194496a11842638331b0d93e6612",
  "parents": [
    "958c01049e0a81a02370c9fce50670cda8478b1b"
  ],
  "author": {
    "name": "Masami Hiramatsu (Google)",
    "email": "mhiramat@kernel.org",
    "time": "Fri Sep 11 23:13:06 2026 +0900"
  },
  "committer": {
    "name": "Masami Hiramatsu (Google)",
    "email": "mhiramat@kernel.org",
    "time": "Sun Oct 11 10:29:43 2026 +0900"
  },
  "message": "bootconfig: Reject unexpected data after null character\n\nIf a bootconfig buffer contains an intermediate null character in the\nmiddle of the configuration, xbc_parse_tree() stops at the null character\nbecause string delimiter searches (e.g. strpbrk()) stop at \u0027\\0\u0027, and\ncleanly breaks out of the loop without error. As a result, any\nconfiguration data following the intermediate null character is silently\nignored, allowing unparsed or potentially malicious data to be hidden\nafter an early termination.\n\nFix this in xbc_parse_tree() by checking that no non-null data remains\nbetween the parser termination point and the end of the input buffer.\nTrailing null characters (such as alignment padding in initrd) continue\nto be accepted as valid.\n\nAlso update apply_xbc() in tools/bootconfig/main.c to calculate the\nbuffer size based on the loaded file size rather than strlen(), so that\nfiles with intermediate null characters are not truncated before\nvalidation.\n\nLink: https://lore.kernel.org/all/178913598628.248794.1048773774471250986.stgit@devnote2/\n\nAssisted-by: LLM\nSigned-off-by: Masami Hiramatsu (Google) \u003cmhiramat@kernel.org\u003e\nReviewed-by: Sang-Heon Jeon \u003cekffu200098@gmail.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "84d74ef234a56cb7c295990aca9a6d62f3c13c14",
      "old_mode": 33188,
      "old_path": "lib/bootconfig.c",
      "new_id": "d64ebfca97965888425cca85c5765079f420f593",
      "new_mode": 33188,
      "new_path": "lib/bootconfig.c"
    },
    {
      "type": "modify",
      "old_id": "522a90bb22c2308bf7bd276daa83605a1d9d5861",
      "old_mode": 33188,
      "old_path": "tools/bootconfig/main.c",
      "new_id": "ba023c7ced117da6495733aad3e0e2ba85763441",
      "new_mode": 33188,
      "new_path": "tools/bootconfig/main.c"
    },
    {
      "type": "modify",
      "old_id": "fc69f815ce4af0e2ce83a1d07afa61ce3a7e541a",
      "old_mode": 33261,
      "old_path": "tools/bootconfig/test-bootconfig.sh",
      "new_id": "530ce7e28d634efb1470c93dec484afe6d3e5ba0",
      "new_mode": 33261,
      "new_path": "tools/bootconfig/test-bootconfig.sh"
    }
  ]
}
