releases/4.4.13/drm-gma500-fix-possible-out-of-bounds-read.patch

   1 From 7ccca1d5bf69fdd1d3c5fcf84faf1659a6e0ad11 Mon Sep 17 00:00:00 2001
   2 From: Itai Handler <itai_handler@hotmail.com>
   3 Date: Tue, 3 Nov 2015 00:20:56 +0200
   4 Subject: drm/gma500: Fix possible out of bounds read
   5
   6 From: Itai Handler <itai_handler@hotmail.com>
   7
   8 commit 7ccca1d5bf69fdd1d3c5fcf84faf1659a6e0ad11 upstream.
   9
  10 Fix possible out of bounds read, by adding missing comma.
  11 The code may read pass the end of the dsi_errors array
  12 when the most significant bit (bit #31) in the intr_stat register
  13 is set.
  14 This bug has been detected using CppCheck (static analysis tool).
  15
  16 Signed-off-by: Itai Handler <itai_handler@hotmail.com>
  17 Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@gmail.com>
  18 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
  19
  20 ---
  21  drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c |    2 +-
  22  1 file changed, 1 insertion(+), 1 deletion(-)
  23
  24 --- a/drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c
  25 +++ b/drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c
  26 @@ -72,7 +72,7 @@ static const char *const dsi_errors[] =
  27         "RX Prot Violation",
  28         "HS Generic Write FIFO Full",
  29         "LP Generic Write FIFO Full",
  30 -       "Generic Read Data Avail"
  31 +       "Generic Read Data Avail",
  32         "Special Packet Sent",
  33         "Tearing Effect",
  34  };