github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-07-27 01:32:21 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

iommu/amd: Bound the early ACPI HID map

Browse Source 
The ivrs_acpihid command-line parser appends entries to a fixed
four-element early_acpihid_map array. Unlike the sibling IOAPIC and HPET
parsers, it does not reject a fifth entry before incrementing the map size.

Check the capacity at the common found label before parsing the HID and
UID or writing the entry.

Fixes: ca3bf5d47c ("iommu/amd: Introduces ivrs_acpihid kernel parameter")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Reviewed-by: Ankit Soni <Ankit.Soni@amd.com>
Signed-off-by: Will Deacon <will@kernel.org>
This commit is contained in:
Pengpeng Hou 2026-07-20 19:46:13 +08:00 committed by Will Deacon
parent 780dfed688
commit fb80117fdd
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
drivers/iommu/amd/init.c
View File

@ -3864,6 +3864,12 @@ static int __init parse_ivrs_acpihid(char *str)
return 1;
found:
if (early_acpihid_map_size == EARLY_MAP_SIZE) {
pr_err("Early ACPI HID map overflow - ignoring ivrs_acpihid%s\n",
str);
return 1;
}
p = acpiid;
hid = strsep(&p, ":");
uid = p;