Dan Carpenter 36fa3e5008 tee: amdtee: out of bounds read in find_session() ... The "index" is a user provided value from 0-USHRT_MAX. If it's over TEE_NUM_SESSIONS (31) then it results in an out of bounds read when we call test_bit(index, sess->sess_mask). Fixes: 757cc3e9ff ("tee: add AMD-TEE driver") Acked-by: Rijo Thomas <Rijo-john.Thomas@amd.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>		2020-03-10 08:12:04 +01:00
..
amdtee_if.h
amdtee_private.h
call.c	tee: amdtee: remove unused variable initialization	2020-01-16 15:18:13 +08:00
core.c	tee: amdtee: out of bounds read in find_session()	2020-03-10 08:12:04 +01:00
Kconfig
Makefile
shm_pool.c