hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable
authorBin Meng <bmeng.cn@gmail.com>
Wed, 3 Mar 2021 12:26:38 +0000 (20:26 +0800)
committerSoonKyu Park <sk7.park@samsung.com>
Tue, 23 Nov 2021 04:45:40 +0000 (13:45 +0900)
commit84e591594a16af14bfaef431ee6f6d3fa5d44663
treec3d03a842a2f815a1d0b6dd482df692516316a37
parent6f41e2d2a680eac665bab51ca0cc8bfb36f4b09e
hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable

Git-commit: 5cd7aa3451b76bb19c0f6adc2b931f091e5d7fcd
References: bsc#1175144, CVE-2020-17380, bsc#1176681, CVE-2020-25085
References: bsc#1182282, CVE-2021-3409

The codes to limit the maximum block size is only necessary when
SDHC_BLKSIZE register is writable.

Tested-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Signed-off-by: Bin Meng <bmeng.cn@gmail.com>
Message-Id: <20210303122639.20004-5-bmeng.cn@gmail.com>
Signed-off-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Signed-off-by: Bruce Rogers <brogers@suse.com>
hw/sd/sdhci.c