]> git.baikalelectronics.ru Git - kernel.git/commit
platform/chrome: cros_ec_sensorhub: Off by one in cros_sensorhub_send_sample()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 7 Apr 2020 09:29:35 +0000 (12:29 +0300)
committerEnric Balletbo i Serra <enric.balletbo@collabora.com>
Mon, 13 Apr 2020 06:09:27 +0000 (08:09 +0200)
commitaef47fa94d2575001cf1d5233d7528a9870b02ce
treefa4837bbb27dfb912aa1f0bfeb1849b5dc4a9564
parentd960b9e9b5c66bc8f7abacb6367a66604925c72f
platform/chrome: cros_ec_sensorhub: Off by one in cros_sensorhub_send_sample()

The sensorhub->push_data[] array has sensorhub->sensor_num elements.
It's allocated in cros_ec_sensorhub_ring_add().  So the > should be >=
to prevent a read one element beyond the end of the array.

Fixes: 435b59551ad0 ("platform/chrome: cros_ec_sensorhub: Add FIFO support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Signed-off-by: Enric Balletbo i Serra <enric.balletbo@collabora.com>
drivers/platform/chrome/cros_ec_sensorhub_ring.c