Minor change to avoid potental overflow accessing pci option roms
PATCH 1/1 Minor change to avoid potental overflow accessing pci option roms
When scan pci option roms space, there is possibility to access beyond OPTIONROM_PHYSICAL_END for 2K.
This patch make the code robust though there are other checks such as 0x55AA signature.
--- tools/firmware/rombios/rombios.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
tools/firmware/rombios/rombios.c +2 -2
@@ -10648,7 +10648,7 @@ rom_scan_increment:add cx, ax pop ax ;; Restore AX cmp cx, ax - jbe rom_scan_loop + jb rom_scan_loop xor ax, ax ;; Restore DS back to 0000: mov ds, ax
@@ -11022,7 +11022,7 @@ post_default_ints: call post_init_pic mov cx, #0xc000 ;; init vga bios - mov ax, #0xc780 + mov ax, #0xc800 call rom_scancall _print_bios_banner
Signature · 1 line
1.7.3
Quoted 2 lines · Zhenzhong Duan
When scan pci option roms space, there is possibility to access beyond
OPTIONROM_PHYSICAL_ENDfor 2K.
And what happens if you do that?
Quoted 3 lines
This patch make the code robust though there are other checks such as
0x55AAsignature.
You seemed to have forgotten to CC the maintainers. The MAINTAINERS file in Xen top directory has a listing.
Quoted 31 lines
Signed-off-by Zhenzhong Duan <[email protected]>--- tools/firmware/rombios/rombios.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)tools/firmware/rombios/rombios.c +2
-2@@ -10648,7 +10648,7 @@ rom_scan_increment:add cx, ax pop ax ;; Restore AX cmp cx, ax - jbe rom_scan_loop + jb rom_scan_loop xor ax, ax ;; Restore DS back to 0000: mov ds, ax@@ -11022,7 +11022,7 @@ post_default_ints: call post_init_pic mov cx, #0xc000 ;; init vga bios - mov ax, #0xc780 + mov ax, #0xc800 call rom_scancall _print_bios_bannerSignature · 1 line
1.7.3
Quoted 4 lines · Konrad Rzeszutek Wilk
Quoted 2 lines · Zhenzhong Duan
When scan pci option roms space, there is possibility to access beyond
OPTIONROM_PHYSICAL_ENDfor 2K.And what happens if you do that?
I guess nothing will happen.
zduan
_______________________________________________
Xen-devel mailing list
[email protected]
http://lists.xen.org/xen-devel
Quoted 7 lines · Zhenzhong Duan
Quoted 4 lines · Konrad Rzeszutek Wilk
Quoted 2 lines · Zhenzhong Duan
When scan pci option roms space, there is possibility to access beyond
OPTIONROM_PHYSICAL_ENDfor 2K.And what happens if you do that?
I guess nothing will happen.
OK. So this is more of a 'bad bug by code inspection', which is absolutly fine. Just please include that in the commit description.
Thanks!
Quoted 2 lines
zduan
_______________________________________________
Xen-devel mailing list
[email protected]
http://lists.xen.org/xen-devel