Alexander Egorenkov 6c6e3a2b0e zipl/boot: fix potential heap overflow in stage2 ...

Current heap size in stage2 is three pages long [0x6000-0x9000] but
get_zeroed_page() assumes it is one page more which might lead to
a heap overflow which will corrupt data located at 0x9000 (stage3
parameters). Calculate the heap size of a stage at run-time
by using the symbols provided by linker.

Furthermore, validate the given address in free_page() to stop illegal
memory accesses.

Signed-off-by: Alexander Egorenkov <egorenar@linux.ibm.com>
Reviewed-by: Philipp Rudo <prudo@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2020-12-15 11:10:50 +01:00

..

boot

zipl/boot: fix potential heap overflow in stage2

2020-12-15 11:10:50 +01:00

doc

zipl: ship a minimal zipl.conf

2019-10-17 16:35:01 +02:00

include

zipl: fix BLS error message

2020-07-17 17:55:39 +02:00

man

zipl: fix zipl.conf man page example for secure boot

2020-02-27 13:44:46 +01:00

src

zipl: make use of util_sys functions to get base device

2020-10-28 15:08:24 +01:00

Makefile

zipl: ship a minimal zipl.conf

2019-10-17 16:35:01 +02:00