commit	fa40bed519337c8b496559d9f588c51f58262bb3	[log] [tgz]
author	Weizhao Jiang <weizhaoj@amazon.com>	Fri Mar 10 11:32:06 2023 -0800
committer	Jérôme Forissier <jerome@forissier.org>	Tue Mar 14 21:46:44 2023 +0100
tree	2a41de6fca1a6522740694f88381c97e99098ddc
parent	442c670a2b565173306a89ad028ad33bac5cca56 [diff]

core: fix out-of-bounds access of dump_ctx

Problem: in the case of no UTA running, the buffer of dump_ctx will
be allocated with 0 size and passed to init_dump_ctx(). That causes
buffer overrunning.

Solution: Check buffer size before allocate the buffer. If it's 0,
return TEE_ERROR_ITEM_NOT_FOUND.

Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@linaro.org>
Tested-by: Weizhao Jiang <weizhaoj@amazon.com>
Signed-off-by: Weizhao Jiang <weizhaoj@amazon.com>

core/kernel/tee_ta_manager.c[diff]

1 file changed

tree: 2a41de6fca1a6522740694f88381c97e99098ddc

README.md

OP-TEE Trusted OS

This git contains source code for the secure side implementation of OP-TEE project.

All official OP-TEE documentation has moved to http://optee.readthedocs.io.

// OP-TEE core maintainers