]> www.infradead.org Git - users/jedix/linux-maple.git/commit
firmware: Sigma: Prevent out of bounds memory access
authorLars-Peter Clausen <lars@metafoo.de>
Mon, 28 Nov 2011 08:44:14 +0000 (09:44 +0100)
committerMaxim Uvarov <maxim.uvarov@oracle.com>
Fri, 16 Dec 2011 01:14:27 +0000 (17:14 -0800)
commit2f5b80464ea4e359ed0fb578b1261c918ae400b1
tree62d8e8867f2048f4a45062c2d14026938b44ce11
parente35ebc414dc5dc3ff5932940f8a8fd974e2d431d
firmware: Sigma: Prevent out of bounds memory access

commit 4f718a29fe4908c2cea782f751e9805319684e2b upstream.

The SigmaDSP firmware loader currently does not perform enough boundary size
checks when processing the firmware. As a result it is possible that a
malformed firmware can cause an out of bounds memory access.

This patch adds checks which ensure that both the action header and the payload
are completely inside the firmware data boundaries before processing them.

Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
Acked-by: Mike Frysinger <vapier@gentoo.org>
Signed-off-by: Mark Brown <broonie@opensource.wolfsonmicro.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/firmware/sigma.c
include/linux/sigma.h