Dan Carpenter 99b23b0d5f misc: vexpress: Off by one in vexpress_syscfg_exec() ...

commit f8a70d8b88 upstream.

The > comparison should be >= to prevent reading beyond the end of the
func->template[] array.

(The func->template array is allocated in vexpress_syscfg_regmap_init()
and it has func->num_templates elements.)

Fixes: 974cc7b934 ("mfd: vexpress: Define the device as MFD cells")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Sudeep Holla <sudeep.holla@arm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-02-20 10:13:18 +01:00

..

altera-stapl

…

c2port

drivers/misc/c2port/c2port-duramar2150.c: checking for NULL instead of IS_ERR()

2017-06-26 07:13:10 +02:00

cb710

…

cxl

cxl: Check if vphb exists before iterating over AFU devices

2017-12-25 14:22:08 +01:00

echo

…

eeprom

eeprom: at24: check at24_read/write arguments

2017-12-05 11:22:51 +01:00

genwqe

genwqe: Fix size check

2019-01-13 10:05:33 +01:00

ibmasm

ibmasm: don't write out of bounds in read handler

2018-07-17 11:31:42 +02:00

lis3lv02d

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

mei

mei: bus: type promotion bug in mei_nfc_if_version()

2018-09-26 08:35:10 +02:00

mic

mm: replace get_user_pages() write/force parameters with gup_flags

2018-12-17 21:55:16 +01:00

sgi-gru

mm: replace get_user_pages() write/force parameters with gup_flags

2018-12-17 21:55:16 +01:00

sgi-xp

mm: rename alloc_pages_exact_node() to __alloc_pages_node()

2015-09-08 15:35:28 -07:00

ti-st

misc: ti-st: Fix memory leak in the error path of probe()

2018-09-19 22:48:57 +02:00

vmw_vmci

vmci: type promotion bug in qp_host_get_user_memory()

2018-10-10 08:52:03 +02:00

ad525x_dpot-i2c.c

misc: ad525x_dpot: Remove unnecessary MODULE_ALIAS()

2015-09-20 19:33:29 -07:00

ad525x_dpot-spi.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

ad525x_dpot.c

drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors

2016-05-04 14:48:52 -07:00

ad525x_dpot.h

…

apds990x.c

…

apds9802als.c

…

arm-charlcd.c

…

atmel_tclib.c

misc: atmel_tclib: get and use slow clock

2015-10-06 12:33:14 +02:00

atmel-ssc.c

misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data

2018-11-27 16:08:02 +01:00

bh1770glc.c

…

bh1780gli.c

…

bmp085-i2c.c

…

bmp085-spi.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

bmp085.c

…

bmp085.h

…

cs5535-mfgpt.c

…

ds1682.c

…

dummy-irq.c

…

enclosure.c

scsi: ses: don't get power status of SES device slot on probe

2018-03-22 09:23:24 +01:00

fsa9480.c

…

hmc6352.c

misc: hmc6352: fix potential Spectre v1

2018-09-26 08:35:07 +02:00

hpilo.c

misc: hpilo: Change e-mail address from hp.com to hpe.com

2015-10-04 12:42:33 +01:00

hpilo.h

…

ics932s401.c

…

ioc4.c

…

isl29003.c

…

isl29020.c

…

Kconfig

misc/bmp085: Enable building as a module

2016-05-04 14:48:51 -07:00

kgdbts.c

drivers/misc: make kgdbts.c slightly more explicitly non-modular

2015-09-20 19:32:35 -07:00

lattice-ecp3-config.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

lkdtm.c

lkdtm: fix ACCESS_USERSPACE test

2015-10-29 09:02:16 +09:00

Makefile

…

pch_phub.c

…

phantom.c

…

pti.c

…

qcom-coincell.c

…

spear13xx_pcie_gadget.c

spear13xx_pcie_gadget: use per-attribute show and store methods

2015-10-13 22:17:40 -07:00

sram.c

misc: sram: partition base address belongs to __iomem space

2015-10-18 19:00:36 -07:00

ti_dac7512.c

spi: Drop owner assignment from spi_drivers

2015-10-28 10:30:17 +09:00

tifm_7xx1.c

…

tifm_core.c

…

tsl2550.c

tsl2550: fix lux1_input error in low light

2018-10-10 08:52:03 +02:00

vexpress-syscfg.c

misc: vexpress: Off by one in vexpress_syscfg_exec()

2019-02-20 10:13:18 +01:00

vmw_balloon.c

vmw_balloon: include asm/io.h

2018-09-19 22:48:59 +02:00