tree 70ad68d799865d833ceab9dbca9259488be8be06
parent 9b3b11fe02f69a8c73352e91dfa67ecfb26fd7f2
author Edward O'Callaghan <quasisec@google.com> 1643782505 +1100
committer Nico Huber <nico.h@gmx.de> 1672935185 +0100

fmap.c: Avoid undefined behaviour with fmap_lsearch([len:=0])

Calling libflashrom entry-points that internally dispatch to
fmap_lsearch() can result in a integer overflow. Therefore
validate the length paramter before attempting to use it.

Tested: `make`

Change-Id: Ifb408c55c3b69ddff453dcc704b7389298050473
Signed-off-by: Edward O'Callaghan <quasisec@google.com>
Spotted-by: Julius Werner <jwerner@chromium.org>
Original-Reviewed-on: https://review.coreboot.org/c/flashrom/+/61545
Original-Reviewed-by: Julius Werner <jwerner@chromium.org>
Original-Reviewed-by: Nico Huber <nico.h@gmx.de>
Original-Reviewed-by: Angel Pons <th3fanbus@gmail.com>