• Jean Delvare's avatar
    firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices · 81dde26d
    Jean Delvare authored
    Before reading the Extended Size field, we should ensure it fits in
    the DMI record. There is already a record length check but it does
    not cover that field.
    
    It would take a seriously corrupted DMI table to hit that bug, so no
    need to worry, but we should still fix it.
    Signed-off-by: default avatarJean Delvare <jdelvare@suse.de>
    Fixes: 6deae96b ("firmware, DMI: Add function to look up a handle and return DIMM size")
    Cc: Tony Luck <tony.luck@intel.com>
    Cc: Borislav Petkov <bp@suse.de>
    81dde26d
dmi_scan.c 27.4 KB