projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3eb7508) | patch
power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
authorWei Yongjun <weiyongjun1@huawei.com>
Sat, 27 Aug 2022 07:32:23 +0000 (07:32 +0000)
committerSebastian Reichel <sre@kernel.org>
Sun, 11 Sep 2022 10:18:59 +0000 (12:18 +0200)
commit9d47e01b9d807808224347935562f7043a358054
treec529c100f9605a713477c4e4662d260326988cb6tree | snapshot
parent3eb7508d0bad13c2c4272fe30adfb02190294290commit | diff
power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()

ADP5061_CHG_STATUS_1_CHG_STATUS is masked with 0x07, which means a length
of 8, but adp5061_chg_type array size is 4, may end up reading 4 elements
beyond the end of the adp5061_chg_type[] array.

Signed-off-by: Wei Yongjun <weiyongjun1@huawei.com>
Acked-by: Michael Hennerich <michael.hennerich@analog.com>
Signed-off-by: Sebastian Reichel <sebastian.reichel@collabora.com>
drivers/power/supply/adp5061.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git