File 5fbcdf99-x86-DMI-fix-SMBIOS-pointer-check.patch of Package xen.22517
# Commit 6befe598706218673b14710d90d00ce90763b372
# Date 2020-11-24 11:25:29 +0100
# Author Jan Beulich <JBeulich@suse.com>
# Committer Jan Beulich <jbeulich@suse.com>
x86/DMI: fix SMBIOS pointer range check
Forever since its introduction this has been using an inverted relation
operator.
Fixes: 54057a28f22b ("x86: support SMBIOS v3")
Signed-off-by: Jan Beulich <JBeulich@suse.com>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
--- a/xen/arch/x86/dmi_scan.c
+++ b/xen/arch/x86/dmi_scan.c
@@ -357,7 +357,7 @@ static int __init dmi_iterate(void (*dec
memcpy_fromio(&smbios3, q, sizeof(smbios3));
if (memcmp(smbios3.anchor, "_SM3_", 5) ||
smbios3.length < sizeof(smbios3) ||
- q < p + 0x10000 - smbios3.length ||
+ q > p + 0x10000 - smbios3.length ||
!dmi_checksum(q, smbios3.length))
smbios3.length = 0;
}