diff options
| author | Yongqiang Sun <Yongqiang.Sun@amd.com> | 2026-06-01 22:28:30 +0300 |
|---|---|---|
| committer | Alex Deucher <alexander.deucher@amd.com> | 2026-06-04 22:27:41 +0300 |
| commit | 961323c26ad4c895e3b0ea1711fc41dfd6368c12 (patch) | |
| tree | a1ea1f252838129eaf740fa55caeff2b7b902797 /include | |
| parent | 8bfd3aeeb7d4c140434bb9e604fca39ebb3e2937 (diff) | |
| download | linux-961323c26ad4c895e3b0ea1711fc41dfd6368c12.tar.xz | |
drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length
Malformed ACPI CRAT tables can advertise a zero or undersized subtype
length. The parser then fails to advance the cursor and loops forever
while the remaining image still looks large enough for a generic header.
Validate sub_type_hdr->length on each iteration before parsing or
advancing. Return -EINVAL and warn when length is zero or smaller than
the generic subtype header.
Signed-off-by: Yongqiang Sun <Yongqiang.Sun@amd.com>
Acked-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions