diff options
author | Maciej Purski <m.purski@samsung.com> | 2017-08-21 12:32:51 +0200 |
---|---|---|
committer | Andrzej Hajda <a.hajda@samsung.com> | 2017-08-24 19:06:32 +0200 |
commit | 79964dbaf662229253b281c42e82e2675a9d3b80 (patch) | |
tree | a8cffc0f30666eb06ef4a4c077ed8d15fcaafcda /drivers/net/dsa/mv88e6xxx | |
parent | drm: Release driver tracking before making the object available again (diff) | |
download | linux-79964dbaf662229253b281c42e82e2675a9d3b80.tar.xz linux-79964dbaf662229253b281c42e82e2675a9d3b80.zip |
drm/bridge/sii8620: Fix memory corruption
Function sii8620_mt_read_devcap_reg_recv() used to read array index
from a wrong msg register, which caused writing out of array
bounds. It led to writing on other fields of struct sii8620.
Signed-off-by: Maciej Purski <m.purski@samsung.com>
Fixes: e9c6da270 ("drm/bridge/sii8620: add reading device capability
registers")
Signed-off-by: Andrzej Hajda <a.hajda@samsung.com>
Link: https://patchwork.freedesktop.org/patch/msgid/1503311571-25819-1-git-send-email-m.purski@samsung.com
Diffstat (limited to 'drivers/net/dsa/mv88e6xxx')
0 files changed, 0 insertions, 0 deletions