From 39a3fe56de5519f41a72fa825ebcbdbcd9acaf5e Mon Sep 17 00:00:00 2001
From: Fredrik Holmqvist <fredrik.holmqvist@gmail.com>
Date: Sun, 30 Sep 2018 12:18:00 +0200
Subject: [PATCH] intel_extreme: check that vbt_header is in area

---
 src/add-ons/kernel/drivers/graphics/intel_extreme/bios.cpp | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/add-ons/kernel/drivers/graphics/intel_extreme/bios.cpp b/src/add-ons/kernel/drivers/graphics/intel_extreme/bios.cpp
index 5bb3ee6695..8421eec0df 100644
--- a/src/add-ons/kernel/drivers/graphics/intel_extreme/bios.cpp
+++ b/src/add-ons/kernel/drivers/graphics/intel_extreme/bios.cpp
@@ -144,7 +144,7 @@ get_bios(void)
 		kVBIOSAddress, vbios.memory));
 
 	int vbtOffset = vbios.ReadWord(kVbtPointer);
-	if (vbtOffset >= kVBIOSSize) {
+	if ((vbtOffset + sizeof(vbt_header)) >= kVBIOSSize) {
 		TRACE((DEVICE_NAME": bad VBT offset : 0x%x\n", vbtOffset));
 		delete_area(vbios.area);
 		return false;
@@ -156,7 +156,6 @@ get_bios(void)
 		delete_area(vbios.area);
 		return false;
 	}
-
 	return true;
 }