diff options
| author | Lee Jones <lee@kernel.org> | 2026-11-03 21:29:10 +0000 |
|---|---|---|
| committer | Linus Walleij <linusw@kernel.org> | 2026-11-08 15:25:48 +0100 |
| commit | a3b0dee21ba6bd88fdc5b928d2a3aefe64fdea05 (patch) | |
| tree | 965ff9ddc9812feb46f012c89a7b008277f1bc6f /scripts/Makefile.thinlto | |
| parent | 92f95b6e4815026a9957c37c4021876696b4152b (diff) | |
| download | linux-next-a3b0dee21ba6bd88fdc5b928d2a3aefe64fdea05.tar.gz linux-next-a3b0dee21ba6bd88fdc5b928d2a3aefe64fdea05.zip | |
pinctrl: realtek: Prevent out-of-bounds access in rtd_pinctrl_find_config()
Several Realtek SoC pin configuration tables (such as rtd1319d_iso_configs,
rtd1619b_iso_configs, and the rtd1625 config tables) omit trailing pins
that do not support pin configuration, making data->info->num_configs
smaller than data->info->num_pins. Because rtd_pinctrl_find_config()
indexes data->info->configs[pin] without checking data->info->num_configs,
requesting pin configuration on a trailing pin reads out-of-bounds memory.
Check that pin is less than data->info->num_configs before indexing
data->info->configs[].
Fixes: e99ce78030db ("pinctrl: realtek: Add common pinctrl driver for Realtek DHC RTD SoCs")
Closes: https://sashiko.dev/#/bug/linux-60e13761-fd9e-4fd3-826a-47344f36d4fa
Cc: stable@vger.kernel.org
Signed-off-by: Lee Jones <lee@kernel.org>
Reviewed-by: Yu-Chun Lin <eleanor.lin@realtek.com>
Signed-off-by: Linus Walleij <linusw@kernel.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions