diff options
| author |   Sudeep Holla <sudeep.holla@kernel.org> | 2026-04-28 19:33:30 +0100 |
|---|---|---|
| committer | Sudeep Holla <sudeep.holla@kernel.org> | 2026-05-05 16:40:41 +0100 |
| commit | 3974ea1938406f9bfa7c1f48d4e43533f447bb08 (patch) | |
| tree | bc14d0032b0017df5b92098422e10afc994e05d6 /tools/testing/selftests/dm-verity/git:/ssh:/git@git.zx2c4.com | |
| parent | firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 (diff) | |
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
The register-based PARTITION_INFO_GET path trusted the firmware-provided
indices when copying partition descriptors into the caller buffer.
Reject inconsistent counts or index progressions so the copy loop cannot
write past the allocated array.
Fixes: ba85c644ac8d ("firmware: arm_ffa: Add support for FFA_PARTITION_INFO_GET_REGS")
Link: https://patch.msgid.link/20260428-ffa_fixes-v2-6-8595ae450034@kernel.org
(fixed cur_idx when exactly one descriptor in the first fragment)
Signed-off-by: Sudeep Holla <sudeep.holla@kernel.org>
Diffstat (limited to 'tools/testing/selftests/dm-verity/git:/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions