diff options
| author | Lars-Peter Clausen <lars@metafoo.de> | 2011-11-28 09:44:14 +0100 |
|---|---|---|
| committer | Mark Brown <broonie@opensource.wolfsonmicro.com> | 2011-11-29 12:53:53 +0100 |
| commit | 4f718a29fe4908c2cea782f751e9805319684e2b (patch) | |
| tree | e4d9d630d4200a40bcc96b2a168828f8fb4ed1df /firmware/sun | |
| parent | ASoC: Supply dcs_codes for newer WM1811 revisions (diff) | |
| download | linux-4f718a29fe4908c2cea782f751e9805319684e2b.tar.xz linux-4f718a29fe4908c2cea782f751e9805319684e2b.zip | |
firmware: Sigma: Prevent out of bounds memory access
The SigmaDSP firmware loader currently does not perform enough boundary size
checks when processing the firmware. As a result it is possible that a
malformed firmware can cause an out of bounds memory access.
This patch adds checks which ensure that both the action header and the payload
are completely inside the firmware data boundaries before processing them.
Signed-off-by: Lars-Peter Clausen <lars@metafoo.de>
Acked-by: Mike Frysinger <vapier@gentoo.org>
Signed-off-by: Mark Brown <broonie@opensource.wolfsonmicro.com>
Cc: stable@kernel.org
Diffstat (limited to 'firmware/sun')
0 files changed, 0 insertions, 0 deletions