]> git.ipfire.org Git - thirdparty/linux.git/commit
misc: pci_endpoint_test: Validate BAR index in doorbell test
authorCarlos Bilbao <carlos.bilbao@kernel.org>
Fri, 10 Apr 2026 23:02:59 +0000 (16:02 -0700)
committerBjorn Helgaas <bhelgaas@google.com>
Mon, 22 Jun 2026 20:23:00 +0000 (15:23 -0500)
commit854bd081c7680029d7886689f6bef8f740625fde
treecbd74c787fd6c2bf31bfb8e026c61e4137f063f4
parente4f26243953fd3e87df93786b40293ca3a6a465e
misc: pci_endpoint_test: Validate BAR index in doorbell test

pci_endpoint_test_doorbell() reads the BAR number directly from an endpoint
test register and uses it as an index into test->bar[].  Add a defensive
bounds check before the dereference: positive values >= PCI_STD_NUM_BARS
are out of range, and NO_BAR (-1) as a negative signed value would slip
past an upper-bound-only check.

Signed-off-by: Carlos Bilbao (Lambda) <carlos.bilbao@kernel.org>
[mani: changed errno to -ERANGE]
Signed-off-by: Manivannan Sadhasivam <mani@kernel.org>
Signed-off-by: Bjorn Helgaas <bhelgaas@google.com>
Link: https://patch.msgid.link/20260410230300.135631-2-carlos.bilbao@kernel.org
drivers/misc/pci_endpoint_test.c