diff options
| author | Alexander Usyskin <alexander.usyskin@intel.com> | 2016-01-17 13:25:01 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2016-02-07 09:12:56 +0300 |
| commit | 7326fffb712f09a315bc73cc1ee63843f59b8bd4 (patch) | |
| tree | 5f542b8e6172be47df34e28ab2b18c61064b4971 /drivers/nvmem/core.c | |
| parent | 92e963f50fc74041b5e9e744c330dca48e04f08d (diff) | |
| download | linux-7326fffb712f09a315bc73cc1ee63843f59b8bd4.tar.xz | |
mei: validate request value in client notify request ioctl
This patch address a possible security issue:
The request field in client notify request ioctl comes from user space
as u32 and is downcasted to u8 with out validation.
Check request field to have approved values
MEI_HBM_NOTIFICATION_STAR/STOP
Cc: <stable@vger.kernel.org> #4.3+
Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/nvmem/core.c')
0 files changed, 0 insertions, 0 deletions