]> git.baikalelectronics.ru Git - kernel.git/commit
mei: hdcp: fix mei_hdcp_verify_mprime() input parameter
authorTomas Winkler <tomas.winkler@intel.com>
Tue, 18 Aug 2020 07:54:06 +0000 (10:54 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 18 Aug 2020 13:39:38 +0000 (15:39 +0200)
commit0a3f7fd9555d93c5528b23a57391e363fa72a703
tree949c0d68a7e399020a9a362cbdcd46ffa9b5e882
parentedff398bb1cca0e87ce669c27b29674e3137020e
mei: hdcp: fix mei_hdcp_verify_mprime() input parameter

wired_cmd_repeater_auth_stream_req_in has a variable
length array at the end. we use struct_size() overflow
macro to determine the size for the allocation and sending
size.
This also fixes bug in case number of streams is > 0 in the original
submission. This bug was not triggered as the number of streams is
always one.

Fixes: d85dcea872a2 (mei: hdcp: Replace one-element array with flexible-array member)
Fixes: 353372ddd647 (misc/mei/hdcp: Verify M_prime)
Cc: <stable@vger.kernel.org> # v5.1+: d85dcea872a2 (mei: hdcp: Replace one-element array with flexible-array member)
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Reviewed-by: Gustavo A. R. Silva <gustavoars@kernel.org>
Link: https://lore.kernel.org/r/20200818075406.2532605-1-tomas.winkler@intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/misc/mei/hdcp/mei_hdcp.c