]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
authorDan Carpenter <dan.carpenter@linaro.org>
Wed, 19 Mar 2025 07:05:47 +0000 (10:05 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 4 Jun 2025 12:40:22 +0000 (14:40 +0200)
commit79c9df2d7a2b126a7e020e41fe8638c699471aeb
tree1e0df32973c27cd3c43bf4c357546c9ed8b9ec6f
parentc0c0b03ea1ab93a617c3bccde2e8935b4fe81fe4
pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()

commit 5a062c3c3b82004766bc3ece82b594d337076152 upstream.

This should be >= pmx->soc->ngroups instead of > to avoid an out of
bounds access.  The pmx->soc->groups[] array is allocated in
tegra_pinctrl_probe().

Fixes: c12bfa0fee65 ("pinctrl-tegra: Restore SFSEL bit when freeing pins")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Kunwu Chan <kunwu.chan@linux.dev>
Link: https://lore.kernel.org/82b40d9d-b437-42a9-9eb3-2328aa6877ac@stanley.mountain
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/pinctrl/tegra/pinctrl-tegra.c