diff options
| author | Tomas Winkler <[email protected]> | 2020-08-18 10:54:06 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2020-08-18 15:39:38 +0200 |
| commit | 51072c0f5b5e98a035c6f63b83ba2afedbb7accd (patch) | |
| tree | 949c0d68a7e399020a9a362cbdcd46ffa9b5e882 /scripts/gdb/linux/device.py | |
| parent | dfe650be6f79fc69021a9b7a559d5aca1e2ef359 (diff) | |
mei: hdcp: fix mei_hdcp_verify_mprime() input parameter
wired_cmd_repeater_auth_stream_req_in has a variable
length array at the end. we use struct_size() overflow
macro to determine the size for the allocation and sending
size.
This also fixes bug in case number of streams is > 0 in the original
submission. This bug was not triggered as the number of streams is
always one.
Fixes: c56967d674e3 (mei: hdcp: Replace one-element array with flexible-array member)
Fixes: 0a1af1b5c18d (misc/mei/hdcp: Verify M_prime)
Cc: <[email protected]> # v5.1+: c56967d674e3 (mei: hdcp: Replace one-element array with flexible-array member)
Signed-off-by: Tomas Winkler <[email protected]>
Reviewed-by: Gustavo A. R. Silva <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'scripts/gdb/linux/device.py')
0 files changed, 0 insertions, 0 deletions