Re: [PATCH] efi/arm64: add a terminator for ptdump marker

2019-01-30 Thread Ard Biesheuvel
On Tue, 29 Jan 2019 at 18:36, Qian Cai wrote: > > Read efi_page_tables debugfs triggering an out-of-bounds access here, > > arch/arm64/mm/dump.c: 282 > if (addr >= st->marker[1].start_address) { > > from, > > arch/arm64/mm/dump.c: 331 > note_page(st, addr, 2, pud_val(pud)); > > because

[PATCH] efi/arm64: add a terminator for ptdump marker

2019-01-29 Thread Qian Cai
Read efi_page_tables debugfs triggering an out-of-bounds access here, arch/arm64/mm/dump.c: 282 if (addr >= st->marker[1].start_address) { from, arch/arm64/mm/dump.c: 331 note_page(st, addr, 2, pud_val(pud)); because st->marker++ is is called after "UEFI runtime end" which is the last element