leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
e004c3e67b
linux/drivers/memory
History
Colin Ian King e004c3e67b memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] 
Currently the array gpmc_cs is indexed by cs before it cs is range checked
and the pointer read from this out-of-index read is dereferenced. Fix this
by performing the range check on cs before the read and the following
pointer dereference.

Addresses-Coverity: ("Negative array index read")
Fixes: 9ed7a776eb ("ARM: OMAP2+: Fix support for multiple devices on a GPMC chip select")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Tony Lindgren <tony@atomide.com>
Link: https://lore.kernel.org/r/20210223193821.17232-1-colin.king@canonical.com
Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
2021-03-07 20:55:00 +01:00
..
samsung memory: samsung: exynos5422-dmc: Correct function names in kerneldoc 2021-02-08 18:13:46 +01:00
tegra Memory controller drivers for v5.12, part two 2021-02-11 13:48:49 +01:00
.gitignore .gitignore: add SPDX License Identifier 2020-03-25 11:50:48 +01:00
atmel-ebi.c memory: atmel-ebi: switch to SPDX license identifiers 2019-11-07 22:33:10 +01:00
atmel-sdramc.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 340 2019-06-05 17:37:07 +02:00
brcmstb_dpfe.c memory: brcmstb_dpfe: Simplify with dev_err_probe() 2020-09-02 17:22:31 +02:00
bt1-l2-ctl.c memory: bt1-l2-ctl: Add blank lines after declarations 2020-07-27 11:13:33 +02:00
da8xx-ddrctl.c memory: da8xx-ddrctl: Remove unused 'node' variable 2020-07-24 16:18:32 +02:00
dfl-emif.c memory: dfl-emif: add the DFL EMIF private feature driver 2021-01-07 15:21:27 +01:00
emif-asm-offsets.c memory: emif-asm-offsets: Add GPLv2 SPDX license header 2020-07-24 16:18:32 +02:00
emif.c memory: emif: Use DEFINE_SPINLOCK() for spinlock 2021-01-03 17:40:20 +01:00
emif.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
fsl_ifc.c memory: fsl_ifc: Fix whitespace issues 2020-07-24 16:18:32 +02:00
fsl-corenet-cf.c memory: fsl-corenet-cf: Fix handling of platform_get_irq() error 2020-09-02 17:32:02 +02:00
jedec_ddr_data.c ARM: SoC-related driver updates 2019-07-19 17:13:56 -07:00
jedec_ddr.h memory: Extend of_memory with LPDDR3 support 2019-10-01 20:28:38 +02:00
jz4780-nemc.c memory: jz4780_nemc: Fix potential NULL dereference in jz4780_nemc_probe() 2020-12-05 14:57:52 +01:00
Kconfig Char/Misc driver patches for 5.12-rc1 2021-02-24 10:25:37 -08:00
Makefile memory: dfl-emif: add the DFL EMIF private feature driver 2021-01-07 15:21:27 +01:00
mtk-smi.c IOMMU Updates for Linux v5.12 2021-02-22 10:31:29 -08:00
mvebu-devbus.c memory: mvebu-devbus: Align with open parenthesis 2020-07-27 11:13:33 +02:00
of_memory.c memory: of: Correct kerneldoc 2020-07-27 11:13:33 +02:00
of_memory.h memory: of: Remove unneeded extern from function declarations 2020-07-24 16:18:32 +02:00
omap-gpmc.c memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] 2021-03-07 20:55:00 +01:00
pl172.c amba: Make the remove callback return void 2021-02-02 14:25:50 +01:00
pl353-smc.c amba: Make the remove callback return void 2021-02-02 14:25:50 +01:00
renesas-rpc-if.c memory: renesas-rpc-if: Make rpcif_enable/disable_rpm() as static inline 2020-11-28 12:37:18 +01:00
stm32-fmc2-ebi.c memory: stm32-fmc2-ebi: add STM32 FMC2 EBI controller driver 2020-07-07 20:58:17 +02:00
ti-aemif.c memory: ti-aemif: Drop child node when jumping out loop 2021-01-25 20:18:42 +01:00
ti-emif-pm.c memory: ti-emif-pm: Drop of_match_ptr from of_device_id table 2021-02-08 18:13:24 +01:00
ti-emif-sram-pm.S memory: ti-emif-sram: move driver-specific asm-offset.h to drivers/memory/ 2019-07-17 10:25:10 +09:00