aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNicholas Piggin <npiggin@gmail.com>2019-11-11 15:44:40 +1000
committerVasant Hegde <hegdevasant@linux.vnet.ibm.com>2019-12-06 13:56:30 +0530
commit577b7e593026943f39325de672c202ad0a67b91f (patch)
treee644996d12c5efa16c7b48e482c102146a60300b
parentd4f999a5d3b5d35feb1a1163f7e4d970fd217316 (diff)
downloadskiboot-577b7e593026943f39325de672c202ad0a67b91f.zip
skiboot-577b7e593026943f39325de672c202ad0a67b91f.tar.gz
skiboot-577b7e593026943f39325de672c202ad0a67b91f.tar.bz2
slw: slw_reinit fix array overrun
[ Upstream commit 6b512fceb4210d5cf166912ef72c90cd29caec67 ] The slw patch saving array is too small, which results in slw_reinit overwriting 32 bytes beyond the end of it. The size is increased to 0x100, which is the architecture interrupt vector size. Signed-off-by: Nicholas Piggin <npiggin@gmail.com> Signed-off-by: Oliver O'Halloran <oohall@gmail.com> Signed-off-by: Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
-rw-r--r--hw/slw.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/slw.c b/hw/slw.c
index bb88f0f..2ca9a9a 100644
--- a/hw/slw.c
+++ b/hw/slw.c
@@ -27,7 +27,7 @@
#include <p8_pore_table_gen_api.H>
#include <sbe_xip_image.h>
-#define MAX_RESET_PATCH_SIZE 64
+#define MAX_RESET_PATCH_SIZE 0x100
static uint32_t slw_saved_reset[MAX_RESET_PATCH_SIZE];