]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
drm/gma500: Fix possible out of bounds read
authorItai Handler <itai_handler@hotmail.com>
Mon, 2 Nov 2015 22:20:56 +0000 (00:20 +0200)
committerWilly Tarreau <w@1wt.eu>
Sun, 21 Aug 2016 21:22:46 +0000 (23:22 +0200)
commit 7ccca1d5bf69fdd1d3c5fcf84faf1659a6e0ad11 upstream.

Fix possible out of bounds read, by adding missing comma.
The code may read pass the end of the dsi_errors array
when the most significant bit (bit #31) in the intr_stat register
is set.
This bug has been detected using CppCheck (static analysis tool).

Cc: stable@vger.kernel.org
Signed-off-by: Itai Handler <itai_handler@hotmail.com>
Signed-off-by: Patrik Jakobsson <patrik.r.jakobsson@gmail.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
drivers/gpu/drm/gma500/mdfld_dsi_pkg_sender.c

index 489ffd2c66e5dd300ec9bb44a154015c41596df6..a3d37e4a84aefd830aba053436871f43616e7508 100644 (file)
@@ -85,7 +85,7 @@ static const char *const dsi_errors[] = {
        "RX Prot Violation",
        "HS Generic Write FIFO Full",
        "LP Generic Write FIFO Full",
-       "Generic Read Data Avail"
+       "Generic Read Data Avail",
        "Special Packet Sent",
        "Tearing Effect",
 };