From aeae1771987c29c8d36f1b3053ee367387d0a685 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marcin=20=C5=9Alusarz?= Date: Wed, 10 Feb 2021 15:05:31 +0100 Subject: [PATCH] intel/tools/aub: handle truncated input file MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Marcin Ĺšlusarz Reviewed-by: Lionel Landwerlin Part-of: --- src/intel/tools/aub_read.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/intel/tools/aub_read.c b/src/intel/tools/aub_read.c index 6196817e9ea..90ee03abd93 100644 --- a/src/intel/tools/aub_read.c +++ b/src/intel/tools/aub_read.c @@ -316,7 +316,13 @@ aub_read_command(struct aub_read *read, const void *data, uint32_t data_len) next += p[4] / 4; } - assert(next <= end); + if (next > end) { + parse_error(read, data, + "input ends unexpectedly (command length: %d, remaining bytes: %d)\n", + (uintptr_t)next - (uintptr_t)data, + (uintptr_t)end - (uintptr_t)data); + return -1; + } switch (h & 0xffff0000) { case MAKE_HEADER(TYPE_AUB, OPCODE_AUB, SUBOPCODE_HEADER):