Re: [PATCH v6 1/6] of: check previous kernel's ima-kexec-buffer against memory bounds

2022-07-20 Thread Nageswara R Sastry
m.com; Nageswara R Sastry; m...@ellerman.id.au; Vaibhav > Jain; Frank Rowand; Prakhar Srivastava; Lakshmi Ramasubramanian; Thiago Jung > Bauermann; Rob Herring; Ritesh Harjani; Robin Murphy > Subject: [PATCH v6 1/6] of: check previous kernel's ima-kexec-buffer against >

[PATCH v6 1/6] of: check previous kernel's ima-kexec-buffer against memory bounds

2022-07-07 Thread Stefan Berger
From: Vaibhav Jain Presently ima_get_kexec_buffer() doesn't check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic if the new kernel is booted with 'mem=X' arg and the ima-kexec-buffer was allocated beyond that range by the pre