From 7339774715f5e405739daa8a845104b0909b7dec Mon Sep 17 00:00:00 2001 From: Richard Zhao Date: Thu, 20 Oct 2016 15:02:04 -0700 Subject: gpu: nvgpu: gm206: fix out of boundary memory access Avoid out of bounds when searching bit header. JIRA VFND-2826 Change-Id: Icbde7c7e04c35c29f316d8a0ad93c76fcb8fae7a Signed-off-by: Richard Zhao Reviewed-on: http://git-master/r/1240185 Reviewed-by: mobile promotions Tested-by: mobile promotions --- drivers/gpu/nvgpu/gm206/bios_gm206.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'drivers/gpu/nvgpu/gm206/bios_gm206.c') diff --git a/drivers/gpu/nvgpu/gm206/bios_gm206.c b/drivers/gpu/nvgpu/gm206/bios_gm206.c index 2f1a32d3..033c84d6 100644 --- a/drivers/gpu/nvgpu/gm206/bios_gm206.c +++ b/drivers/gpu/nvgpu/gm206/bios_gm206.c @@ -882,7 +882,7 @@ static int gm206_bios_init(struct gk20a *g) return err; gk20a_dbg_info("read bios"); - for (i = 0; i < g->bios.size; i++) { + for (i = 0; i < g->bios.size - 6; i++) { if (gm206_bios_rdu16(g, i) == BIT_HEADER_ID && gm206_bios_rdu32(g, i+2) == BIT_HEADER_SIGNATURE) { gm206_bios_parse_bit(g, i); -- cgit v1.2.2