]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
authorDan Carpenter <dan.carpenter@linaro.org>
Mon, 30 Sep 2024 07:51:31 +0000 (10:51 +0300)
committerBjorn Andersson <andersson@kernel.org>
Sun, 6 Oct 2024 03:22:42 +0000 (22:22 -0500)
This loop is supposed to break if the frequency returned from
clk_round_rate() is the same as on the previous iteration.  However,
that check doesn't make sense on the first iteration through the loop.
It leads to reading before the start of these->clk_perf_tbl[] array.

Fixes: eddac5af0654 ("soc: qcom: Add GENI based QUP Wrapper driver")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/8cd12678-f44a-4b16-a579-c8f11175ee8c@stanley.mountain
Signed-off-by: Bjorn Andersson <andersson@kernel.org>
drivers/soc/qcom/qcom-geni-se.c

index 2e8f24d5da80b6aadbdacfcc0c36d7cf9a4e92a1..4cb959106efa9e1249893a4a5c0bcb9b8fce6cfc 100644 (file)
@@ -585,7 +585,8 @@ int geni_se_clk_tbl_get(struct geni_se *se, unsigned long **tbl)
 
        for (i = 0; i < MAX_CLK_PERF_LEVEL; i++) {
                freq = clk_round_rate(se->clk, freq + 1);
-               if (freq <= 0 || freq == se->clk_perf_tbl[i - 1])
+               if (freq <= 0 ||
+                   (i > 0 && freq == se->clk_perf_tbl[i - 1]))
                        break;
                se->clk_perf_tbl[i] = freq;
        }