Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b79d3800 authored by Jean Delvare's avatar Jean Delvare Committed by Greg Kroah-Hartman
Browse files

firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices



[ Upstream commit 81dde26de9c08bb04c4962a15608778aaffb3cf9 ]

Before reading the Extended Size field, we should ensure it fits in
the DMI record. There is already a record length check but it does
not cover that field.

It would take a seriously corrupted DMI table to hit that bug, so no
need to worry, but we should still fix it.

Signed-off-by: default avatarJean Delvare <jdelvare@suse.de>
Fixes: 6deae96b ("firmware, DMI: Add function to look up a handle and return DIMM size")
Cc: Tony Luck <tony.luck@intel.com>
Cc: Borislav Petkov <bp@suse.de>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent fc7510d8
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment