serial: mxs-auart: Fix out-of-bounds access through serial port index
[ Upstream commitpull/10/headdd345a31bf
] The auart_port[] array is indexed using a value derived from the "serialN" alias in DT, or from platform data, which may lead to an out-of-bounds access. Fix this by adding a range check. Fixes:1ea6607d4c
("serial: mxs-auart: Allow device tree probing") Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
parent
491e61fe3c
commit
5f53807e75
|
@ -1667,6 +1667,10 @@ static int mxs_auart_probe(struct platform_device *pdev)
|
|||
s->port.line = pdev->id < 0 ? 0 : pdev->id;
|
||||
else if (ret < 0)
|
||||
return ret;
|
||||
if (s->port.line >= ARRAY_SIZE(auart_port)) {
|
||||
dev_err(&pdev->dev, "serial%d out of range\n", s->port.line);
|
||||
return -EINVAL;
|
||||
}
|
||||
|
||||
if (of_id) {
|
||||
pdev->id_entry = of_id->data;
|
||||
|
|
Loading…
Reference in New Issue