Bhaumik Bhatt 546362a9ef bus: mhi: core: Validate channel ID when processing command completions ... MHI reads the channel ID from the event ring element sent by the device which can be any value between 0 and 255. In order to prevent any out of bound accesses, add a check against the maximum number of channels supported by the controller and those channels not configured yet so as to skip processing of that event ring element. Link: https://lore.kernel.org/r/1624558141-11045-1-git-send-email-bbhatt@codeaurora.org Fixes: 1d3173a3ba ("bus: mhi: core: Add support for processing events from client device") Cc: stable@vger.kernel.org #5.10 Reviewed-by: Hemant Kumar <hemantk@codeaurora.org> Reviewed-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Reviewed-by: Jeffrey Hugo <quic_jhugo@quicinc.com> Signed-off-by: Bhaumik Bhatt <bbhatt@codeaurora.org> Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Link: https://lore.kernel.org/r/20210716075106.49938-3-manivannan.sadhasivam@linaro.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-07-21 13:16:18 +02:00
..
boot.c	bus: mhi: core: Wait for MHI READY state in most scenarios	2021-03-31 16:51:43 +05:30
debugfs.c	bus: mhi: core: Rename debugfs directory name	2021-03-10 20:11:22 +05:30
init.c	bus: mhi: core: Clear configuration from channel context during reset	2021-04-07 12:25:42 +05:30
internal.h	bus: mhi: core: Improvements to the channel handling state machine	2021-04-07 12:25:42 +05:30
main.c	bus: mhi: core: Validate channel ID when processing command completions	2021-07-21 13:16:18 +02:00
Makefile	bus: mhi: core: Fix the building of MHI module	2020-10-02 11:33:47 +02:00
pm.c	bus: mhi: Wait for M2 state during system resume	2021-06-24 15:51:54 +02:00