diff options
| author | Heinrich Schuchardt <heinrich.schuchardt@canonical.com> | 2024-01-04 04:49:42 +0100 |
|---|---|---|
| committer | Jaehoon Chung <jh80.chung@samsung.com> | 2024-04-15 15:19:11 +0900 |
| commit | f9a86fb118530fea5a87dd7f88e90c31c989043f (patch) | |
| tree | 8568b92d2b805c9b3805dc6905510deaa1f57bcd /drivers/ddr/imx/imx8ulp | |
| parent | b03b49046af5dfca599d2ce8f0aafed89b97aa91 (diff) | |
mmc: Avoid buffer overrun in mmc_startup()
If the CSD register contains a reserved value (4 - 7) in bits 0:2 of the
TRAN_SPEED field, a buffer overrun occurs. Resize the mapping table.
According to the original report
https://lore.kernel.org/u-boot/20180826231332.2491-11-erosca@de.adit-jv.com/
reserved values have been observed resulting in a buffer overrun.
Reported-by: Eugeniu Rosca <erosca@de.adit-jv.com>
Fixes: 272cc70b211e ("Add MMC Framework")
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
Reviewed-by: Jaehoon Chung <jh80.chung@samsung.com>
Diffstat (limited to 'drivers/ddr/imx/imx8ulp')
0 files changed, 0 insertions, 0 deletions