Commit dbf2dce7 authored by Kevin Wolf's avatar Kevin Wolf
Browse files

multiboot: Check validity of mh_header_addr 



I couldn't find a case where this prevents something bad from happening
that isn't already caught by other checks, but let's err on the safe
side and check that mh_header_addr is as expected.

Signed-off-by: default avatarKevin Wolf <kwolf@redhat.com>
Reviewed-by: default avatarJack Schwartz <jack.schwartz@oracle.com>
parent b17a9054

hw/i386/multiboot.c

+4 −0
Original line number Diff line number Diff line
@@ -229,6 +229,10 @@ int load_multiboot(FWCfgState *fw_cfg, 
            error_report("invalid load_addr address");

            exit(1);

        }

        if (mh_header_addr - mh_load_addr > i) {

            error_report("invalid header_addr address");

            exit(1);

        }



        uint32_t mb_kernel_text_offset = i - (mh_header_addr - mh_load_addr);

        uint32_t mb_load_size = 0;