Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

backport-v1.14: arch: arc: fix the bug of blt in syscall #23500

Merged
merged 1 commit into from Mar 18, 2020

Conversation

d3zd3z
Copy link
Collaborator

@d3zd3z d3zd3z commented Mar 16, 2020

blt is signed comparsion, if r6 is a negative number created by
malicious code, it will pass the check, bring a secure risk.

use blo (unsinged comparison) to do the check.

Signed-off-by: Wayne Ren wei.ren@synopsys.com
Signed-off-by: David Brown david.brown@linaro.org

Backport of #23328

blt is signed comparsion, if r6 is a negative number created by
malicious code, it will pass the check, bring a secure risk.

use blo (unsinged comparison) to do the check.

Signed-off-by: Wayne Ren <wei.ren@synopsys.com>
Signed-off-by: David Brown <david.brown@linaro.org>
@d3zd3z d3zd3z added the backport v1.14-branch Request backport to the v1.14-branch label Mar 16, 2020
@zephyrbot zephyrbot added the area: ARC ARC Architecture label Mar 16, 2020
@nashif nashif added this to To do in Backports Mar 16, 2020
@carlescufi carlescufi moved this from To do to Ready in Backports Mar 17, 2020
@nashif nashif merged commit de09c93 into zephyrproject-rtos:v1.14-branch Mar 18, 2020
Backports automation moved this from Ready to Done Mar 18, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: ARC ARC Architecture backport v1.14-branch Request backport to the v1.14-branch
Projects
Backports
  
Done
Development

Successfully merging this pull request may close these issues.

None yet

6 participants