Re: [PATCH v3 2/9] x86/microcode/AMD: check whether the equivalence table fits in the file

From: Borislav Petkov
Date: Thu Mar 15 2018 - 06:43:32 EST


On Thu, Mar 15, 2018 at 12:34:09AM +0100, Maciej S. Szmigiero wrote:
> 'size' here is the length of the whole CPIO blob containing all
> containers combined (well, the remaining part of it).
>
> If we skip over 'size' bytes we'll have nothing left to parse.

Well, if

size < eqiv_tbl_len + CONTAINER_HDR_SZ

then you really have nothing else to parse.

Come to think of it, if the whole blob is truncated like that, we
shouldn't trust it at all and stop looking at it. So yes, "return size"
is the right thing to do but for a different reason.

--
Regards/Gruss,
Boris.

Good mailing practices for 400: avoid top-posting and trim the reply.