Jean Delvare b79d380017 firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices ...

[ Upstream commit 81dde26de9 ]

Before reading the Extended Size field, we should ensure it fits in
the DMI record. There is already a record length check but it does
not cover that field.

It would take a seriously corrupted DMI table to hit that bug, so no
need to worry, but we should still fix it.

Signed-off-by: Jean Delvare <jdelvare@suse.de>
Fixes: 6deae96b42 ("firmware, DMI: Add function to look up a handle and return DIMM size")
Cc: Tony Luck <tony.luck@intel.com>
Cc: Borislav Petkov <bp@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:51:19 +01:00

..

arm_scmi

firmware: arm_scmi: update rate_discrete in clock_describe_rates_get

2020-01-27 14:50:54 +01:00

broadcom

firmware: bcm47xx_nvram: Support small (0x6000 B) NVRAM partitions

2018-04-23 16:39:35 +01:00

efi

Revert "efi: Fix debugobjects warning on 'efi_rts_work'"

2020-01-27 14:49:51 +01:00

google

firmware: coreboot: Let OF core populate platform device

2020-01-27 14:49:55 +01:00

meson

firmware: meson-sm: rework meson_sm_init to use module_platform_driver_probe

2018-03-07 17:33:52 -08:00

tegra

firmware: tegra: adjust tested variable

2018-03-08 14:43:13 +01:00

arm_scpi.c

treewide: devm_kzalloc() -> devm_kcalloc()

2018-06-12 16:19:22 -07:00

arm_sdei.c

firmware: arm_sdei: Fix DT platform device creation

2019-12-05 09:21:02 +01:00

dcdbas.c

platform/x86: Fix dell driver init order

2018-03-14 11:05:53 -07:00

dcdbas.h

dcdbas: export functionality for use in other drivers

2009-01-08 08:31:12 -08:00

dell_rbu.c

firmware: dell_rbu: Make payload memory uncachable

2019-11-20 18:47:41 +01:00

dmi_scan.c

firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices

2020-01-27 14:51:19 +01:00

dmi-id.c

firmware: dmi: Add access to the SKU ID string

2018-06-17 14:09:42 +02:00

dmi-sysfs.c

firmware: dmi: handle missing DMI data gracefully

2018-02-03 11:25:20 +01:00

edd.c

edd: don't spam log if no EDD information is present

2018-03-27 09:51:23 +02:00

iscsi_ibft_find.c

efi: Make 'efi_enabled' a function to query EFI facilities

2013-01-30 11:51:59 -08:00

iscsi_ibft.c

iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND

2019-08-16 10:12:45 +02:00

Kconfig

iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND

2019-08-16 10:12:45 +02:00

Makefile

firmware: arm_scmi: add basic driver infrastructure for SCMI

2018-02-28 16:37:57 +00:00

memmap.c

drivers/firmware/memmap.c: fix kernel-doc format

2015-06-25 17:00:41 -07:00

pcdp.c

x86, mpparse, x86/acpi, x86/PCI, x86/dmi, SFI: Use memremap() for RAM mappings

2017-07-18 11:37:58 +02:00

pcdp.h

Update broken web addresses in the kernel.

2010-10-18 11:03:14 +02:00

psci_checker.c

firmware/psci: psci_checker: Park kthreads before stopping them

2019-08-06 19:06:48 +02:00

psci.c

firmware/psci: Expose SMCCC version through psci_ops

2018-02-06 22:54:11 +00:00

qcom_scm-32.c

firmware: qcom: scm: Fix crash in qcom_scm_call_atomic1()

2018-05-24 22:36:45 -05:00

qcom_scm-64.c

firmware: qcom: scm: Ensure 'a0' status code is treated as signed

2019-12-17 20:35:42 +01:00

qcom_scm.c

firmware: qcom_scm: Use proper types for dma mappings

2019-10-05 13:09:34 +02:00

qcom_scm.h

Merge tag 'rproc-v4.15' of git://github.com/andersson/remoteproc

2017-11-17 20:14:10 -08:00

qemu_fw_cfg.c

media: headers: fix linux/mod_devicetable.h inclusions

2018-08-02 18:30:54 -04:00

raspberrypi.c

firmware: raspberrypi: Fix firmware calls with large buffers

2019-12-13 08:51:26 +01:00

scpi_pm_domain.c

firmware: scpi: add device power domain support using genpd

2016-06-21 10:26:51 +01:00

ti_sci.c

firmware: ti_sci: Always request response from firmware

2019-09-19 09:09:39 +02:00

ti_sci.h

firmware: ti_sci: Switch to SPDX Licensing

2018-05-04 23:10:23 -07:00