fwts: acpidump can overrun on MADT if the table contains garbage at end and length is incorrect
Bug #1278422 reported by
Colin Ian King
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Firmware Test Suite |
Fix Released
|
High
|
Colin Ian King | ||
Bug Description
With some firmware where MADT states it is longer than it really is then fwts acpidump can overrun and break because of garbage at the end of the table. We need to check for invalid sub table types and invalid sub table lengths and break out of the loop when we hit these garbage values.
Related branches
| Changed in fwts: | |
| status: | New → In Progress |
| importance: | Undecided → High |
| assignee: | nobody → Colin King (colin-king) |
Revision history for this message
| Colin Ian King (colin-king) wrote | #1 |
| Changed in fwts: | |
| milestone: | none → 14.02.00 |
Revision history for this message
| Colin Ian King (colin-king) wrote | #2 |
| Changed in fwts: | |
| status: | In Progress → Fix Committed |
| Changed in fwts: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
Fix sent to fwts-devel mailing list https:/