mirror of
https://github.com/torvalds/linux.git
synced 2025-01-01 15:51:46 +00:00
habanalabs: validate FW file size
We must validate FW size in order not to corrupt memory in case a malicious FW file will be present in system. Signed-off-by: Ofir Bitton <obitton@habana.ai> Signed-off-by: Oded Gabbay <oded.gabbay@gmail.com>
This commit is contained in:
parent
804d057cfa
commit
bce382a8bb
@ -13,6 +13,7 @@
|
||||
#include <linux/io-64-nonatomic-lo-hi.h>
|
||||
#include <linux/slab.h>
|
||||
|
||||
#define FW_FILE_MAX_SIZE 0x1400000 /* maximum size of 20MB */
|
||||
/**
|
||||
* hl_fw_load_fw_to_device() - Load F/W code to device's memory.
|
||||
*
|
||||
@ -48,6 +49,14 @@ int hl_fw_load_fw_to_device(struct hl_device *hdev, const char *fw_name,
|
||||
|
||||
dev_dbg(hdev->dev, "%s firmware size == %zu\n", fw_name, fw_size);
|
||||
|
||||
if (fw_size > FW_FILE_MAX_SIZE) {
|
||||
dev_err(hdev->dev,
|
||||
"FW file size %zu exceeds maximum of %u bytes\n",
|
||||
fw_size, FW_FILE_MAX_SIZE);
|
||||
rc = -EINVAL;
|
||||
goto out;
|
||||
}
|
||||
|
||||
fw_data = (const u64 *) fw->data;
|
||||
|
||||
memcpy_toio(dst, fw_data, fw_size);
|
||||
|
Loading…
Reference in New Issue
Block a user