diff options
Diffstat (limited to 'src/northbridge')
| -rw-r--r-- | src/northbridge/intel/i82830/i82830_smihandler.c | 8 | ||||
| -rw-r--r-- | src/northbridge/intel/i82830/vga.c | 2 |
2 files changed, 8 insertions, 2 deletions
diff --git a/src/northbridge/intel/i82830/i82830_smihandler.c b/src/northbridge/intel/i82830/i82830_smihandler.c index e53d283b4b..733e624c26 100644 --- a/src/northbridge/intel/i82830/i82830_smihandler.c +++ b/src/northbridge/intel/i82830/i82830_smihandler.c @@ -187,7 +187,7 @@ static void mbi_call(u8 subf, banner_id_t *banner_id) int i, count=0; obj_header->banner.retsts = MSH_IF_NOT_FOUND; - for (i=0; i< mbi_len;) { + for (i=0; i<mbi_len;) { int len; if (!(mbi[i] == 0xf0 && mbi [i+1] == 0xf6)) { @@ -199,6 +199,12 @@ static void mbi_call(u8 subf, banner_id_t *banner_id) len = ALIGN((mbi_header->size * 16) + sizeof(mbi_header) + mbi_header->name_len, 16); if (obj_header->objnum == count) { +#ifdef DEBUG_SMI_I82830 + if (mbi_header->name_len == 0xff) { + printk(BIOS_DEBUG, "| |- corrupt.\n"); + break; + } +#endif int headerlen = ALIGN(sizeof(mbi_header) + mbi_header->name_len + 15, 16); #ifdef DEBUG_SMI_I82830 printk(BIOS_DEBUG, "| |- headerlen = %d\n", headerlen); diff --git a/src/northbridge/intel/i82830/vga.c b/src/northbridge/intel/i82830/vga.c index 37c967414b..66b591b548 100644 --- a/src/northbridge/intel/i82830/vga.c +++ b/src/northbridge/intel/i82830/vga.c @@ -42,7 +42,7 @@ static void vga_init(device_t dev) "type %x\n", file->type, CBFS_TYPE_MBI); } else { mbi = (void *) CBFS_SUBHEADER(file); - mbi_len = file->len; + mbi_len = ntohl(file->len); } } else { printk(BIOS_INFO, "Could not find MBI.\n"); |