aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNicholas Piggin <npiggin@gmail.com>2019-11-11 15:44:40 +1000
committerOliver O'Halloran <oohall@gmail.com>2019-11-11 18:35:00 +1100
commit6b512fceb4210d5cf166912ef72c90cd29caec67 (patch)
treec3097ad31dd0328239708904e20f2b9f0b6c7ed6
parenta0340a0995efae59d153eb8126474ef4b6f8320b (diff)
downloadskiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.zip
skiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.tar.gz
skiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.tar.bz2
slw: slw_reinit fix array overrun
The slw patch saving array is too small, which results in slw_reinit overwriting 32 bytes beyond the end of it. The size is increased to 0x100, which is the architecture interrupt vector size. Signed-off-by: Nicholas Piggin <npiggin@gmail.com> Signed-off-by: Oliver O'Halloran <oohall@gmail.com>
-rw-r--r--hw/slw.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/slw.c b/hw/slw.c
index f1d0298..cb27f24 100644
--- a/hw/slw.c
+++ b/hw/slw.c
@@ -28,7 +28,7 @@
#include <p8_pore_table_gen_api.H>
#include <sbe_xip_image.h>
-#define MAX_RESET_PATCH_SIZE 64
+#define MAX_RESET_PATCH_SIZE 0x100
static uint32_t slw_saved_reset[MAX_RESET_PATCH_SIZE];