mei: fix transfer over dma with extended header
authorAlexander Usyskin <alexander.usyskin@intel.com>
Fri, 29 Jan 2021 12:07:46 +0000 (14:07 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 4 Mar 2021 10:38:40 +0000 (11:38 +0100)
commit30e24dcab1a74e4ed0355d3f6ce431084d7493af
tree112b92c27e6b8c1be10ec3c342f4166e95a8a15b
parent4fb3523ba3e4337052d0a81df37c71ef0c70b206
mei: fix transfer over dma with extended header

commit 1309ecc90f16ee9cc3077761e7f4474369747e6e upstream.

The size in header field for packet transferred over DMA
includes size of the extended header.
Include extended header in size check.
Add size and sanity checks on extended header.

Cc: <stable@vger.kernel.org> # v5.10+
Signed-off-by: Alexander Usyskin <alexander.usyskin@intel.com>
Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
Link: https://lore.kernel.org/r/20210129120752.850325-1-tomas.winkler@intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/misc/mei/interrupt.c