]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
authorDan Carpenter <dan.carpenter@linaro.org>
Wed, 28 May 2025 20:22:19 +0000 (23:22 +0300)
committerWim Van Sebroeck <wim@linux-watchdog.org>
Wed, 16 Jul 2025 16:05:00 +0000 (18:05 +0200)
commit8b61d8ca751bc15875b50e0ff6ac3ba0cf95a529
treef0514a96511a2d07f1dcb944254ee7a2a27522e7
parentd7b8f8e20813f0179d8ef519541a3527e7661d3a
watchdog: ziirave_wdt: check record length in ziirave_firm_verify()

The "rec->len" value comes from the firmware.  We generally do
trust firmware, but it's always better to double check.  If
the length value is too large it would lead to memory corruption
when we set "data[i] = ret;"

Fixes: 217209db0204 ("watchdog: ziirave_wdt: Add support to upload the firmware.")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Guenter Roeck <linux@roeck-us.net>
Link: https://lore.kernel.org/r/3b58b453f0faa8b968c90523f52c11908b56c346.1748463049.git.dan.carpenter@linaro.org
Signed-off-by: Guenter Roeck <linux@roeck-us.net>
Signed-off-by: Wim Van Sebroeck <wim@linux-watchdog.org>
drivers/watchdog/ziirave_wdt.c