diff options
| author | Ross Lagerwall <ross.lagerwall@citrix.com> | 2019-01-28 10:04:23 +0000 |
|---|---|---|
| committer | Rafael J. Wysocki <rafael.j.wysocki@intel.com> | 2019-02-20 10:34:03 +0100 |
| commit | 1c0d9b1c31d19d3aa90296a184e4624545d7d1ee (patch) | |
| tree | 2db35c1e8f9e6da2701b3efc1cc26dbb9aefe369 /drivers/hid/i2c-hid/i2c-hid-core.c | |
| parent | a2ed1ee91f4f2c59b71db12c16bff659dee9ee0b (diff) | |
| download | linux-1c0d9b1c31d19d3aa90296a184e4624545d7d1ee.tar.gz | |
ACPI: APEI: Fix possible out-of-bounds access to BERT region
Check that the length recorded in the generic error status block is within the region before checking the contents of the region itself. Otherwise it may result in an out-of-bounds access if the system firmware has generated a status block with an invalid length (larger than the mapped region). Also move the block_status check so that it only happens after the block has been verified to be within the mapped region. Signed-off-by: Ross Lagerwall <ross.lagerwall@citrix.com> Acked-by: Borislav Petkov <bp@suse.de> Tested-by: Tyler Baicar <baicar.tyler@gmail.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Diffstat (limited to 'drivers/hid/i2c-hid/i2c-hid-core.c')
0 files changed, 0 insertions, 0 deletions