]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/commit
x86/fpu: Limit xstate copy size in xstateregs_set()
authorThomas Gleixner <tglx@linutronix.de>
Wed, 23 Jun 2021 12:01:35 +0000 (14:01 +0200)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Mon, 20 Sep 2021 16:49:02 +0000 (18:49 +0200)
commit61f51a67fdeb68351f931d47f10bb555d982fcfc
treeadb36059c633c8fd23d9612fc54917d449b94911
parent3fd8c5499cdf0cd7621d81e369dc7e9db33b01d1
x86/fpu: Limit xstate copy size in xstateregs_set()

BugLink: https://bugs.launchpad.net/bugs/1939440
[ Upstream commit 07d6688b22e09be465652cf2da0da6bf86154df6 ]

If the count argument is larger than the xstate size, this will happily
copy beyond the end of xstate.

Fixes: 91c3dba7dbc1 ("x86/fpu/xstate: Fix PTRACE frames for XSAVES")
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Reviewed-by: Andy Lutomirski <luto@kernel.org>
Reviewed-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210623121452.120741557@linutronix.de
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Kelsey Skunberg <kelsey.skunberg@canonical.com>
arch/x86/kernel/fpu/regset.c