Searched hist:"4 c86cb23" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/linux/drivers/i3c/master/mipi-i3c-hci/ |
| H A D | dma.c | 4c86cb23 Thu Sep 21 00:56:56 CDT 2023 Jarkko Nikula <jarkko.nikula@linux.intel.com> i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler
[ Upstream commit 45a832f989e520095429589d5b01b0c65da9b574 ]
Do not loop over ring headers in hci_dma_irq_handler() that are not
allocated and enabled in hci_dma_init(). Otherwise out of bounds access
will occur from rings->headers[i] access when i >= number of allocated
ring headers.
Signed-off-by: Jarkko Nikula <jarkko.nikula@linux.intel.com>
Link: https://lore.kernel.org/r/20230921055704.1087277-5-jarkko.nikula@linux.intel.com
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|