fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 1 Sep 2022 05:18:45 +0000 (08:18 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Oct 2022 10:35:07 +0000 (12:35 +0200)
commitb94605f5cb99e90c8ca91523597a40e1bd59546b
tree5263aed422f2c1b163785bf6436bc61b8519149e
parent11bd8bbdf8f6f5c1145bb158793107a57e3a1f07
fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()

[ Upstream commit 939bc5453b8cbdde9f1e5110ce8309aedb1b501a ]

The "hdr.count * sizeof(s32)" multiplication can overflow on 32 bit
systems leading to memory corruption.  Use array_size() to fix that.

Fixes: 322b598be4d9 ("fpga: dfl: introduce interrupt trigger setting API")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Xu Yilun <yilun.xu@intel.com>
Link: https://lore.kernel.org/r/YxBAtYCM38dM7yzI@kili
Signed-off-by: Xu Yilun <yilun.xu@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/fpga/dfl.c