Re: [PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-27 Thread Arnd Bergmann
On Tue, Oct 27, 2020 at 10:53 AM Michal Simek wrote: > On 26. 10. 20 16:54, Arnd Bergmann wrote: > > From: Arnd Bergmann > > > > The zynqmp_pm_set_suspend_mode() and zynqmp_pm_get_trustzone_version() > > functions pass values as api_id into zynqmp_pm_invoke_fn > > that are beyond PM_API_MAX,

RE: [PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-27 Thread Rajan Vaja
Bergmann ; Michal Simek ; > >> Rajan Vaja > >> Cc: Arnd Bergmann ; Rajan Vaja ; > Greg > >> Kroah-Hartman ; Tejas Patel > >> ; linux-arm-ker...@lists.infradead.org; linux- > >> ker...@vger.kernel.org; git > >> Subject

Re: [PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-27 Thread Michal Simek
; Kroah-Hartman ; Tejas Patel >> ; linux-arm-ker...@lists.infradead.org; linux- >> ker...@vger.kernel.org; git >> Subject: Re: [PATCH] firmware: xilinx: fix out-of-bounds access >> >> >> >> On 26. 10. 20 16:54, Arnd Bergmann wrote: >>> From: Arnd Bergmann &

RE: [PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-27 Thread Rajan Vaja
ker...@vger.kernel.org; git > Subject: Re: [PATCH] firmware: xilinx: fix out-of-bounds access > > > > On 26. 10. 20 16:54, Arnd Bergmann wrote: > > From: Arnd Bergmann > > > > The zynqmp_pm_set_suspend_mode() and > zynqmp_pm_get_trustzone_version

Re: [PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-27 Thread Michal Simek
On 26. 10. 20 16:54, Arnd Bergmann wrote: > From: Arnd Bergmann > > The zynqmp_pm_set_suspend_mode() and zynqmp_pm_get_trustzone_version() > functions pass values as api_id into zynqmp_pm_invoke_fn > that are beyond PM_API_MAX, resulting in an out-of-bounds access: > >

[PATCH] firmware: xilinx: fix out-of-bounds access

2020-10-26 Thread Arnd Bergmann
From: Arnd Bergmann The zynqmp_pm_set_suspend_mode() and zynqmp_pm_get_trustzone_version() functions pass values as api_id into zynqmp_pm_invoke_fn that are beyond PM_API_MAX, resulting in an out-of-bounds access: drivers/firmware/xilinx/zynqmp.c: In function 'zynqmp_pm_set_suspend_mode':