[5/6] net/bnxt: add integer underflow check
Checks
Commit Message
If a request to read a small value is passed to nvram reader
it would underflow.
Reported-by: Christopher Ertl <Christopher.Ertl@microsoft.com>
Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
---
drivers/net/bnxt/bnxt_hwrm.c | 3 +++
1 file changed, 3 insertions(+)
@@ -3859,6 +3859,9 @@ int bnxt_get_nvram_directory(struct bnxt *bp, uint32_t len, uint8_t *data)
*data++ = dir_entries;
*data++ = entry_length;
+ if (len <= 2)
+ return -EINVAL;
+
len -= 2;
memset(data, 0xff, len);