From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <barebox-bounces+u.kleine-koenig=pengutronix.de@lists.infradead.org>
Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33])
 by bombadil.infradead.org with esmtps (Exim 4.87 #1 (Red Hat Linux))
 id 1ddf1R-0008Bc-Ki
 for barebox@lists.infradead.org; Fri, 04 Aug 2017 16:00:24 +0000
From: =?UTF-8?q?Uwe=20Kleine-K=C3=B6nig?= <u.kleine-koenig@pengutronix.de>
Date: Fri,  4 Aug 2017 17:59:56 +0200
Message-Id: <20170804155956.19105-1-u.kleine-koenig@pengutronix.de>
MIME-Version: 1.0
List-Id: <barebox.lists.infradead.org>
List-Unsubscribe: <http://lists.infradead.org/mailman/options/barebox>,
 <mailto:barebox-request@lists.infradead.org?subject=unsubscribe>
List-Archive: <http://lists.infradead.org/pipermail/barebox/>
List-Post: <mailto:barebox@lists.infradead.org>
List-Help: <mailto:barebox-request@lists.infradead.org?subject=help>
List-Subscribe: <http://lists.infradead.org/mailman/listinfo/barebox>,
 <mailto:barebox-request@lists.infradead.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Sender: "barebox" <barebox-bounces@lists.infradead.org>
Errors-To: barebox-bounces+u.kleine-koenig=pengutronix.de@lists.infradead.org
Subject: [PATCH] scripts/imx: fix out-of-bounds access for big DCD tables
To: barebox@lists.infradead.org

YWRkX2hlYWRlcl92MiBtaWdodCBuZWVkIGEgYnVmZmVyIHRoYXQgaXMgYmlnZ2VyIHRoYW4gSEVB
REVSX0xFTgooMHgxMDAwKSBhcyBNQVhfRENEICogc2l6ZW9mKHUzMikgKGkuZS4gdGhlIG1heGlt
YWwgc2l6ZSBvZiB0aGUgZGNkCnRhYmxlIGFsb25lKSBpcyBhbHJlYWR5IDB4MTAwMC4gQWRkaXRp
b25hbGx5IGFkZF9oZWFkZXJfdjIgYWRkcyBwYWRkaW5nCih1c3VhbGx5IDB4NDAwKSBhbmQgYSBz
dHJ1Y3QgaW14X2ZsYXNoX2hlYWRlcl92MiAoNDgpLiBTbyBleHBhbmQgdGhlCmJ1ZmZlciBzaXpl
IGFjY29yZGluZ2x5IGZvciB2Mi4KClNpZ25lZC1vZmYtYnk6IFV3ZSBLbGVpbmUtS8O2bmlnIDx1
LmtsZWluZS1rb2VuaWdAcGVuZ3V0cm9uaXguZGU+Ci0tLQogc2NyaXB0cy9pbXgvaW14LWltYWdl
LmMgfCAxMiArKysrKysrKy0tLS0KIDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyksIDQg
ZGVsZXRpb25zKC0pCgpkaWZmIC0tZ2l0IGEvc2NyaXB0cy9pbXgvaW14LWltYWdlLmMgYi9zY3Jp
cHRzL2lteC9pbXgtaW1hZ2UuYwppbmRleCBkZDU3OTljY2NjNGIuLmIyNDFlOGM0YjY4ZSAxMDA2
NDQKLS0tIGEvc2NyaXB0cy9pbXgvaW14LWltYWdlLmMKKysrIGIvc2NyaXB0cy9pbXgvaW14LWlt
YWdlLmMKQEAgLTc2MiwxMCArNzYyLDYgQEAgaW50IG1haW4oaW50IGFyZ2MsIGNoYXIgKmFyZ3Zb
XSkKIAkJY3JlYXRlX3VzYl9pbWFnZSA9IDA7CiAJfQogCi0JYnVmID0gY2FsbG9jKDEsIEhFQURF
Ul9MRU4pOwotCWlmICghYnVmKQotCQlleGl0KDEpOwotCiAJaWYgKGRhdGEuaW1hZ2VfZGNkX29m
ZnNldCA9PSAweGZmZmZmZmZmKSB7CiAJCWlmIChjcmVhdGVfdXNiX2ltYWdlKQogCQkJZGF0YS5p
bWFnZV9kY2Rfb2Zmc2V0ID0gMHgwOwpAQCAtNzkwLDYgKzc4NiwxMCBAQCBpbnQgbWFpbihpbnQg
YXJnYywgY2hhciAqYXJndltdKQogCiAJc3dpdGNoIChkYXRhLmhlYWRlcl92ZXJzaW9uKSB7CiAJ
Y2FzZSAxOgorCQlidWYgPSBjYWxsb2MoMSwgSEVBREVSX0xFTik7CisJCWlmICghYnVmKQorCQkJ
ZXhpdCgxKTsKKwogCQlhZGRfaGVhZGVyX3YxKCZkYXRhLCBidWYpOwogCQlpZiAoZGF0YS5zcmtm
aWxlKSB7CiAJCQlyZXQgPSBhZGRfc3JrKGJ1ZiwgZGF0YS5pbWFnZV9kY2Rfb2Zmc2V0LCBkYXRh
LmltYWdlX2xvYWRfYWRkciwKQEAgLTc5OSw2ICs3OTksMTAgQEAgaW50IG1haW4oaW50IGFyZ2Ms
IGNoYXIgKmFyZ3ZbXSkKIAkJfQogCQlicmVhazsKIAljYXNlIDI6CisJCWJ1ZiA9IGNhbGxvYygx
LCBkYXRhLmltYWdlX2RjZF9vZmZzZXQgKyBzaXplb2Yoc3RydWN0IGlteF9mbGFzaF9oZWFkZXJf
djIpICsgTUFYX0RDRCAqIHNpemVvZih1MzIpKTsKKwkJaWYgKCFidWYpCisJCQlleGl0KDEpOwor
CiAJCWFkZF9oZWFkZXJfdjIoJmRhdGEsIGJ1Zik7CiAJCWJyZWFrOwogCWRlZmF1bHQ6Ci0tIAoy
LjExLjAKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpi
YXJlYm94IG1haWxpbmcgbGlzdApiYXJlYm94QGxpc3RzLmluZnJhZGVhZC5vcmcKaHR0cDovL2xp
c3RzLmluZnJhZGVhZC5vcmcvbWFpbG1hbi9saXN0aW5mby9iYXJlYm94Cg==