Geert Uytterhoeven f28308185e serial: arc_uart: Fix out-of-bounds access through DT alias ...

[ Upstream commit f9f5786987 ]

The arc_uart_ports[] array is indexed using a value derived from the
"serialN" alias in DT, which may lead to an out-of-bounds access.

Fix this by adding a range check.

Note that the array size is defined by a Kconfig symbol
(CONFIG_SERIAL_ARC_NR_PORTS), so this can even be triggered using a
legitimate DTB.

Fixes: ea28fd56fc ("serial/arc-uart: switch to devicetree based probing")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-05-30 07:49:15 +02:00

..

hvc

tty: hvc_xen: hide xen_console_remove when unused

2018-02-25 11:03:46 +01:00

ipwireless

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

2015-04-14 09:50:27 -07:00

serial

serial: arc_uart: Fix out-of-bounds access through DT alias

2018-05-30 07:49:15 +02:00

vt

vt: change SGR 21 to follow the standards

2018-04-08 11:52:01 +02:00

amiserial.c

tty: amiserial.c: move assignment out of if () block

2015-05-10 19:04:16 +02:00

bfin_jtag_comm.c

TTY: bfin_jtag_comm: remove incorrect wait_until_sent operation

2015-03-07 03:44:14 +01:00

cyclades.c

tty: Remove ASYNC_CLOSING checks in open()/hangup() methods

2015-10-17 21:11:29 -07:00

ehv_bytechan.c

tty: remove unused variable sprop

2015-02-03 15:52:13 -08:00

goldfish.c

Revert "tty: goldfish: Fix a parameter of a call to free_irq"

2017-10-21 17:09:06 +02:00

isicom.c

tty/isicom: fix big-endian compile warning

2015-02-02 10:11:25 -08:00

Kconfig

tty: cyclades: cyz_interrupt is only used for PCI

2018-02-25 11:03:48 +01:00

Makefile

TTY: Add MIPS EJTAG Fast Debug Channel TTY driver

2015-03-31 12:04:12 +02:00

metag_da.c

tty/metag_da: Avoid module_init/module_exit in non-modular code

2015-06-16 14:12:31 -04:00

mips_ejtag_fdc.c

ttyFDC: Fix build problems due to use of module_{init,exit}

2015-10-17 21:29:21 -07:00

moxa.c

TTY: fix decimal printf format specifiers prefixed with 0x

2014-09-08 15:51:35 -07:00

moxa.h

tty: move a number of tty drivers from drivers/char/ to drivers/tty/

2011-02-22 16:14:56 -08:00

mxser.c

tty: mxser: Fix build warning introduced by dfc7b837c7 (Re: linux-next: build warning after merge of the tty.current tree)

2013-05-22 10:26:02 -07:00

mxser.h

Fix common misspellings

2011-03-31 11:26:23 -03:00

n_gsm.c

tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

2018-05-02 07:53:40 -07:00

n_hdlc.c

tty: n_hdlc: get rid of racy n_hdlc.tbuf

2017-03-15 09:57:10 +08:00

n_r3964.c

tty: r3964: Replace/remove bogus tty lock use

2015-10-17 21:11:29 -07:00

n_tracerouter.c

n_tracerouter: stop including <asm-generic/bug>

2015-10-15 00:21:10 +02:00

n_tracesink.c

n_tracesink: stop including <asm-generic/bug>

2015-10-15 00:21:11 +02:00

n_tracesink.h

n_tracerouter and n_tracesink ldisc additions.

2011-05-13 16:31:00 -07:00

n_tty.c

tty: make n_tty_read() always abort if hangup is in progress

2018-04-24 09:32:04 +02:00

nozomi.c

tty: nozomi: avoid a harmless gcc warning

2017-04-30 05:49:27 +02:00

pty.c

tty: pty: Fix ldisc flush after userspace become aware of the data already

2017-05-20 14:27:02 +02:00

rocket_int.h

tty: move a number of tty drivers from drivers/char/ to drivers/tty/

2011-02-22 16:14:56 -08:00

rocket.c

tty: Remove tty_port::close_wait

2015-10-17 21:11:29 -07:00

rocket.h

tty: rocket: fix comment of ROCKET_SPD_HI

2015-05-24 12:49:16 -07:00

synclink_gt.c

tty: Remove ASYNC_CLOSING checks in open()/hangup() methods

2015-10-17 21:11:29 -07:00

synclink.c

tty: synclink, fix indentation

2015-10-17 21:14:06 -07:00

synclinkmp.c

tty: Remove ASYNC_CLOSING checks in open()/hangup() methods

2015-10-17 21:11:29 -07:00

sysrq.c

sysrq: Fix warning in sysrq generated crash.

2018-01-17 09:35:28 +01:00

tty_audit.c

tty: audit: Fix audit source

2015-11-20 16:19:54 -08:00

tty_buffer.c

tty: fix __tty_insert_flip_char regression

2017-09-27 11:00:13 +02:00

tty_io.c

tty: Don't call panic() at tty_ldisc_init()

2018-05-02 07:53:40 -07:00

tty_ioctl.c

tty: Fix tty_send_xchar() lock order inversion

2015-11-20 16:19:54 -08:00

tty_ldisc.c

tty: Use __GFP_NOFAIL for tty_ldisc_get()

2018-05-02 07:53:41 -07:00

tty_ldsem.c

tty: tty_ldsem.c: move assignment out of if () block

2015-05-10 19:04:18 +02:00

tty_mutex.c

tty: Drop krefs for interrupted tty lock

2017-06-14 13:16:26 +02:00

tty_port.c

tty: Abstract tty buffer work

2015-10-17 21:32:21 -07:00