diff options
author | Nicholas Piggin <npiggin@gmail.com> | 2019-11-11 15:44:40 +1000 |
---|---|---|
committer | Oliver O'Halloran <oohall@gmail.com> | 2019-11-11 18:35:00 +1100 |
commit | 6b512fceb4210d5cf166912ef72c90cd29caec67 (patch) | |
tree | c3097ad31dd0328239708904e20f2b9f0b6c7ed6 | |
parent | a0340a0995efae59d153eb8126474ef4b6f8320b (diff) | |
download | skiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.zip skiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.tar.gz skiboot-6b512fceb4210d5cf166912ef72c90cd29caec67.tar.bz2 |
slw: slw_reinit fix array overrun
The slw patch saving array is too small, which results in slw_reinit
overwriting 32 bytes beyond the end of it. The size is increased to
0x100, which is the architecture interrupt vector size.
Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
Signed-off-by: Oliver O'Halloran <oohall@gmail.com>
-rw-r--r-- | hw/slw.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -28,7 +28,7 @@ #include <p8_pore_table_gen_api.H> #include <sbe_xip_image.h> -#define MAX_RESET_PATCH_SIZE 64 +#define MAX_RESET_PATCH_SIZE 0x100 static uint32_t slw_saved_reset[MAX_RESET_PATCH_SIZE]; |