iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ic3: off by one in mode_show()

Browse Source 
This should be >= ARRAY_SIZE() to avoid reading one element beyond the
end of the array.

Fixes: 3a379bbcea0a ("i3c: Add core I3C infrastructure")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Boris Brezillon <boris.brezillon@bootlin.com>
This commit is contained in:
Dan Carpenter 2018-11-23 10:15:05 +03:00 committed by Boris Brezillon
parent 840414ae59
commit afe120c777
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/i3c/master.c
View File

@ -475,7 +475,7 @@ static ssize_t mode_show(struct device *dev,
i3c_bus_normaluse_lock(i3cbus); i3c_bus_normaluse_lock(i3cbus);
if (i3cbus->mode < 0 || if (i3cbus->mode < 0 ||
i3cbus->mode > ARRAY_SIZE(i3c_bus_mode_strings) || i3cbus->mode >= ARRAY_SIZE(i3c_bus_mode_strings) ||
!i3c_bus_mode_strings[i3cbus->mode]) !i3c_bus_mode_strings[i3cbus->mode])
ret = sprintf(buf, "unknown\n"); ret = sprintf(buf, "unknown\n");
else else