tree 8568b92d2b805c9b3805dc6905510deaa1f57bcd
parent 3765b863ebab3095d7c3360151fc5350b2356b2f
author Heinrich Schuchardt <heinrich.schuchardt@canonical.com> 1704340182 +0100
committer Jaehoon Chung <jh80.chung@samsung.com> 1713161951 +0900

mmc: Avoid buffer overrun in mmc_startup()

If the CSD register contains a reserved value (4 - 7) in bits 0:2 of the
TRAN_SPEED field, a buffer overrun occurs. Resize the mapping table.

According to the original report
https://lore.kernel.org/u-boot/20180826231332.2491-11-erosca@de.adit-jv.com/
reserved values have been observed resulting in a buffer overrun.

Reported-by: Eugeniu Rosca <erosca@de.adit-jv.com>
Fixes: 272cc70b211e ("Add MMC Framework")
Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
Reviewed-by: Jaehoon Chung <jh80.chung@samsung.com>