deepblue/ipmitool
1
0
Fork 0
mirror of https://github.com/ipmitool/ipmitool.git synced 2025-05-10 18:47:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ID:358 - check data length in else branch of ipmi_spd_print()

Browse Source 
Commit adds data length check into '} else {' branch of ipmi_spd_print() in
order to avoid out-of-bound access.
This commit is contained in:
Zdenek Styblik 2015-01-04 14:58:37 +01:00
parent 9811f79eae
commit d9acbc4cd0
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/dimm_spd.c
View File

@ -950,6 +950,9 @@ ipmi_spd_print(uint8_t *spd_data, int len)
} }
else else
{ {
if (len < 100) {
return (-1);
}
ii = (spd_data[3] & 0x0f) + (spd_data[4] & 0x0f) - 17; ii = (spd_data[3] & 0x0f) + (spd_data[4] & 0x0f) - 17;
k = ((spd_data[5] & 0x7) + 1) * spd_data[17]; k = ((spd_data[5] & 0x7) + 1) * spd_data[17];