Lines Matching refs:fru
4 Subject: [PATCH] fru: Fix buffer overflow vulnerabilities
29 read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
40 @@ -628,10 +631,12 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
43 if (finish > fru->size) {
44 + memset(frubuf + fru->size, 0, length - fru->size);
45 finish = fru->size;
53 @@ -667,6 +672,7 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
59 tmp = fru->access ? off >> 1 : off;
61 @@ -707,9 +713,18 @@ read_fru_area(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
64 tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];
80 @@ -742,7 +757,9 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
91 @@ -755,10 +772,12 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t …
94 if (finish > fru->size) {
95 + memset(frubuf + fru->size, 0, length - fru->size);
96 finish = fru->size;
104 @@ -773,6 +792,8 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t id,
105 if (fru->access && fru_data_rqst_size > 16)
111 tmp = fru->access ? off >> 1 : off;
113 @@ -804,8 +825,16 @@ read_fru_area_section(struct ipmi_intf * intf, struct fru_info *fru, uint8_t i…
116 tmp = fru->access ? rsp->data[0] << 1 : rsp->data[0];