]> git.baikalelectronics.ru Git - kernel.git/commit
bus: mhi: core: Add range check for channel id received in event ring
authorHemant Kumar <hemantk@codeaurora.org>
Thu, 21 May 2020 17:02:38 +0000 (22:32 +0530)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 22 May 2020 07:35:41 +0000 (09:35 +0200)
commit020960685041fc09ab6a23cf244477cdcbb75c5f
tree3825d5d9eea97be95a1a3910ad616c30d4e3f15e
parent44d4e063d18b87c0fef1b19f7883f10e71c544b6
bus: mhi: core: Add range check for channel id received in event ring

MHI data completion handler function reads channel id from event
ring element. Value is under the control of MHI devices and can be
any value between 0 and 255. In order to prevent out of bound access
add a bound check against the max channel supported by controller
and skip processing of that event ring element.

Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>
Signed-off-by: Bhaumik Bhatt <bbhatt@codeaurora.org>
Reviewed-by: Jeffrey Hugo <jhugo@codeaurora.org>
Reviewed-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
Signed-off-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
Link: https://lore.kernel.org/r/20200521170249.21795-4-manivannan.sadhasivam@linaro.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/bus/mhi/core/main.c