mirror of
https://git.proxmox.com/git/mirror_ubuntu-kernels.git
synced 2026-08-21 22:52:31 +00:00
mc_saved_tmp is a static array allocated on the stack, we need to make sure mc_saved_count stays within its bounds, otherwise we're overflowing the stack in _save_mc(). A specially crafted microcode header could lead to a kernel crash or potentially kernel execution. Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Fenghua Yu <fenghua.yu@intel.com> Link: http://lkml.kernel.org/r/1422964824-22056-1-git-send-email-quentin.casasnovas@oracle.com Signed-off-by: Borislav Petkov <bp@suse.de> |
||
|---|---|---|
| .. | ||
| amd_early.c | ||
| amd.c | ||
| core_early.c | ||
| core.c | ||
| intel_early.c | ||
| intel_lib.c | ||
| intel.c | ||
| Makefile | ||