diff options
| author | Stefan Wahren <stefan.wahren@i2se.com> | 2022-07-13 17:49:51 +0200 |
|---|---|---|
| committer | Stephen Boyd <sboyd@kernel.org> | 2022-08-23 15:51:10 -0700 |
| commit | bc163555603e4ae9c817675ad80d618a4cdbfa2d (patch) | |
| tree | 9d88acac9a328fd40681b39fa48f6243688df5f7 /drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.h | |
| parent | 35f73cca1cecda0c1f8bb7d8be4ce5cd2d46ae8c (diff) | |
clk: bcm: rpi: Prevent out-of-bounds access
The while loop in raspberrypi_discover_clocks() relies on the assumption
that the id of the last clock element is zero. Because this data comes
from the Videocore firmware and it doesn't guarantuee such a behavior
this could lead to out-of-bounds access. So fix this by providing
a sentinel element.
Fixes: 93d2725affd6 ("clk: bcm: rpi: Discover the firmware clocks")
Link: https://github.com/raspberrypi/firmware/issues/1688
Suggested-by: Phil Elwell <phil@raspberrypi.com>
Signed-off-by: Stefan Wahren <stefan.wahren@i2se.com>
Link: https://lore.kernel.org/r/20220713154953.3336-2-stefan.wahren@i2se.com
Acked-by: Florian Fainelli <f.fainelli@gmail.com>
Reviewed-by: Ivan T. Ivanov <iivanov@suse.de>
Signed-off-by: Stephen Boyd <sboyd@kernel.org>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.h')
0 files changed, 0 insertions, 0 deletions