]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
authorDan Carpenter <dan.carpenter@linaro.org>
Wed, 19 Mar 2025 07:05:47 +0000 (10:05 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 29 May 2025 09:13:48 +0000 (11:13 +0200)
commitdaf56f2b4062d63ae4069e80405beb78e1ff86d4
tree88a92deb73ef2248cdfe99be9220ff9dbe3c124f
parent63da47daf71c79cc2b312acd154615c8f0fb6aa0
pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()

[ Upstream commit 5a062c3c3b82004766bc3ece82b594d337076152 ]

This should be >= pmx->soc->ngroups instead of > to avoid an out of
bounds access.  The pmx->soc->groups[] array is allocated in
tegra_pinctrl_probe().

Fixes: c12bfa0fee65 ("pinctrl-tegra: Restore SFSEL bit when freeing pins")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Kunwu Chan <kunwu.chan@linux.dev>
Link: https://lore.kernel.org/82b40d9d-b437-42a9-9eb3-2328aa6877ac@stanley.mountain
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/pinctrl/tegra/pinctrl-tegra.c