platform/x86/amd/pmf: Fix possible out-of-bound memory accesses
authorArmin Wolf <W_Armin@gmx.de>
Mon, 4 Mar 2024 20:50:05 +0000 (21:50 +0100)
committerIlpo Järvinen <ilpo.jarvinen@linux.intel.com>
Tue, 12 Mar 2024 10:48:07 +0000 (12:48 +0200)
commit8c9be42172e2a18f39c41dde3ce3e4cddaf6cf75
tree497c1da541dec6bec4883754f0671b259b14a7ba
parent9ced197640a837ed4a7505e1be8be3ce541efffa
platform/x86/amd/pmf: Fix possible out-of-bound memory accesses

The length of the policy buffer is not validated before accessing it,
which means that multiple out-of-bounds memory accesses can occur.

This is especially bad since userspace can load policy binaries over
debugfs.

Compile-tested only.

Fixes: 7c45534afa44 ("platform/x86/amd/pmf: Add support for PMF Policy Binary")
Signed-off-by: Armin Wolf <W_Armin@gmx.de>
Reviewed-by: Shyam Sundar S K <Shyam-sundar.S-k@amd.com>
Link: https://lore.kernel.org/r/20240304205005.10078-5-W_Armin@gmx.de
Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
drivers/platform/x86/amd/pmf/tee-if.c