Skip to content

Commit

Permalink
slw: slw_reinit fix array overrun
Browse files Browse the repository at this point in the history
The slw patch saving array is too small, which results in slw_reinit
overwriting 32 bytes beyond the end of it. The size is increased to
0x100, which is the architecture interrupt vector size.

Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
Signed-off-by: Oliver O'Halloran <oohall@gmail.com>
  • Loading branch information
npiggin authored and oohal committed Nov 11, 2019
1 parent a0340a0 commit 6b512fc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion hw/slw.c
Expand Up @@ -28,7 +28,7 @@
#include <p8_pore_table_gen_api.H>
#include <sbe_xip_image.h>

#define MAX_RESET_PATCH_SIZE 64
#define MAX_RESET_PATCH_SIZE 0x100

static uint32_t slw_saved_reset[MAX_RESET_PATCH_SIZE];

Expand Down

0 comments on commit 6b512fc

Please sign in to comment.