Quentin Casasnovas f84598bd7c x86/microcode/intel: Guard against stack overflow in the loader
mc_saved_tmp is a static array allocated on the stack, we need to make
sure mc_saved_count stays within its bounds, otherwise we're overflowing
the stack in _save_mc(). A specially crafted microcode header could lead
to a kernel crash or potentially kernel execution.

Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
Cc: "H. Peter Anvin" <hpa@zytor.com>
Cc: Fenghua Yu <fenghua.yu@intel.com>
Link: http://lkml.kernel.org/r/1422964824-22056-1-git-send-email-quentin.casasnovas@oracle.com
Signed-off-by: Borislav Petkov <bp@suse.de>
2015-02-19 12:41:37 +01:00
..
2014-06-04 16:53:57 -07:00
2014-12-13 12:42:51 -08:00
2014-10-17 13:40:51 -07:00
2014-11-11 17:57:46 +01:00
2014-08-26 13:45:49 -04:00
2014-01-03 14:37:13 +00:00
2014-06-04 16:53:57 -07:00
2014-10-17 13:40:52 -07:00
2014-12-05 13:55:44 +01:00