Linus Walleij 26ae2c942b usb: isp1760: Fix out-of-bounds array access ... Running the driver through kasan gives an interesting splat: BUG: KASAN: global-out-of-bounds in isp1760_register+0x180/0x70c Read of size 20 at addr f1db2e64 by task swapper/0/1 (...) isp1760_register from isp1760_plat_probe+0x1d8/0x220 (...) This happens because the loop reading the regmap fields for the different ISP1760 variants look like this: for (i = 0; i < HC_FIELD_MAX; i++) { ... } Meaning it expects the arrays to be at least HC_FIELD_MAX - 1 long. However the arrays isp1760_hc_reg_fields[], isp1763_hc_reg_fields[], isp1763_hc_volatile_ranges[] and isp1763_dc_volatile_ranges[] are dynamically sized during compilation. Fix this by putting an empty assignment to the [HC_FIELD_MAX] and [DC_FIELD_MAX] array member at the end of each array. This will make the array one member longer than it needs to be, but avoids the risk of overwriting whatever is inside [HC_FIELD_MAX - 1] and is simple and intuitive to read. Also add comments explaining what is going on. Fixes: 1da9e1c068 ("usb: isp1760: move to regmap for register access") Cc: stable@vger.kernel.org Cc: Rui Miguel Silva <rui.silva@linaro.org> Cc: Dietmar Eggemann <dietmar.eggemann@arm.com> Reviewed-by: Rui Miguel Silva <rui.silva@linaro.org> Signed-off-by: Linus Walleij <linus.walleij@linaro.org> Link: https://lore.kernel.org/r/20220516091424.391209-1-linus.walleij@linaro.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-05-19 18:10:59 +02:00
..
accessibility
acpi	Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40"	2022-04-21 19:58:14 +02:00
amba
android	binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0	2022-04-22 17:22:51 +02:00
ata	ata: pata_marvell: Check the 'bmdma_addr' beforing reading	2022-04-22 08:45:06 +09:00
atm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-03-17 13:56:58 -07:00
auxdisplay	auxdisplay: lcd2s: Use array size explicitly in lcd2s_gotoxy()	2022-03-18 20:31:14 +01:00
base	Linux 5.18-rc5	2022-05-03 16:35:26 +02:00
bcma	Core MTD changes:	2022-03-25 13:35:34 -07:00
block	floppy: disable FDRAWCMD by default	2022-04-27 09:41:54 -07:00
bluetooth	Bluetooth: ath3k: remove superfluous header files	2022-03-18 17:12:09 +01:00
bus	- Fix locking when accessing device MSI descriptors	2022-05-01 09:30:47 -07:00
cdrom	cdrom: remove unused variable	2022-04-06 08:47:52 -06:00
char	random: document crng_fast_key_erasure() destination possibility	2022-04-25 17:26:40 +02:00
clk	Add missing sentinel, check return value and mark rtc-32k as critical	2022-04-25 16:47:24 -07:00
clocksource	asm-generic updates for 5.18	2022-03-23 18:03:08 -07:00
comedi
connector
counter	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
cpufreq	cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts	2022-04-26 12:08:31 +05:30
cpuidle	cpuidle: riscv: support non-SMP config	2022-04-19 17:42:08 -07:00
crypto	virtio: features, fixes	2022-03-31 13:57:15 -07:00
cxl	cxl/pci: Drop shadowed variable	2022-04-08 12:59:43 -07:00
dax	dax for 5.18	2022-03-24 18:12:09 -07:00
dca
devfreq
dio
dma	dmaengine: idxd: skip clearing device context when device is read-only	2022-04-20 17:24:43 +05:30
dma-buf	dma-buf: handle empty dma_fence_arrays gracefully	2022-03-29 09:14:30 +02:00
edac	EDAC/synopsys: Read the error count from the correct register	2022-04-14 14:44:49 +02:00
eisa
extcon
firewire
firmware	sound fixes for 5.18-rc4	2022-04-22 13:11:38 -07:00
fpga
fsi
gnss
gpio	gpio: Request interrupts after IRQ is initialized	2022-04-22 13:59:19 -07:00
gpu	Merge tag 'amd-drm-fixes-5.18-2022-04-27' of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes	2022-04-29 10:27:05 +10:00
greybus
hid	HID: usbhid: remove third argument of usb_maxpacket()	2022-04-23 10:33:53 +02:00
hsi
hv	hyperv-fixes for 5.18-rc2	2022-04-07 06:35:34 -10:00
hwmon	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
hwspinlock	hwspinlock: sprd: Use struct_size() helper in devm_kzalloc()	2022-03-11 14:56:57 -06:00
hwtracing	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
i2c	i2c: ismt: Fix undefined behavior due to shift overflowing the constant	2022-04-15 23:49:02 +02:00
i3c	i3c: fix uninitialized variable use in i2c setup	2022-03-08 22:33:52 +01:00
idle	intel_idle: Fix SPR C6 optimization	2022-04-27 20:36:47 +02:00
iio	iio: imu: inv_icm42600: Fix I2C init possible nack	2022-04-16 15:03:58 +01:00
infiniband	RDMA/hfi1: Fix use-after-free bug for mm struct	2022-04-08 15:40:06 -03:00
input	Linux 5.18-rc5	2022-05-03 16:35:26 +02:00
interconnect	interconnect: qcom: sdx55: Drop IP0 interconnects	2022-04-14 09:47:16 +03:00
iommu	iommu/omap: Fix regression in probe for NULL pointer dereference	2022-04-08 11:16:29 +02:00
ipack
irqchip	irqchip/gic, gic-v3: Prevent GSI to SGI translations	2022-04-05 16:33:47 +01:00
isdn	mISDN: fix typo "frame to short" -> "frame too short"	2022-03-21 13:26:38 +00:00
leds	LED updates for 5.18-rc1. Nothing major here, there are two drivers	2022-03-27 14:09:48 -07:00
macintosh
mailbox	mailbox: ti-msgmgr: Operate mailbox in polled mode during system suspend	2022-03-12 19:33:30 -06:00
mcb
md	block-5.18-2022-04-22	2022-04-23 09:46:44 -07:00
media	Linux 5.18-rc5	2022-05-03 16:35:26 +02:00
memory	memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode	2022-04-21 17:00:24 +02:00
memstick
message	scsi: message: fusion: Remove redundant variable dmp	2022-04-06 22:28:07 -04:00
mfd	- New Drivers	2022-03-25 13:56:18 -07:00
misc	thunderbolt: Changes for v5.19 merge window	2022-05-19 18:00:01 +02:00
mmc	mmc: core: improve API to make clear mmc_hw_reset is for cards	2022-04-08 11:00:08 +02:00
most
mtd	mtd: rawnand: qcom: fix memory corruption that causes panic	2022-04-21 09:29:07 +02:00
mux
net	Linux 5.18-rc5	2022-05-03 16:35:26 +02:00
nfc	spi: Updates for v5.18	2022-03-21 18:33:57 -07:00
ntb
nubus
nvdimm	libnvdimm for 5.18	2022-03-30 10:04:11 -07:00
nvme	nvme-pci: disable namespace identifiers for Qemu controllers	2022-04-15 06:56:17 +02:00
nvmem	nvmem: brcm_nvram: parse NVRAM content into NVMEM cells	2022-03-18 14:08:36 +01:00
of	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
opp	OPP: Add support of "opp-microwatt" for EM registration	2022-03-03 09:35:04 +05:30
parisc	parisc: Fix CPU affinity for Lasi, WAX and Dino chips	2022-03-29 21:37:12 +02:00
parport	parport_pc: Also enable driver for PCI systems	2022-03-18 14:01:41 +01:00
pci	hyperv-fixes for 5.18-rc2	2022-04-07 06:35:34 -10:00
pcmcia
peci
perf	arm_pmu: Validate single/group leader events	2022-04-13 11:48:45 +01:00
phy	phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe()	2022-04-20 14:42:44 +05:30
pinctrl	pinctrl: pistachio: fix use of irq_of_parse_and_map()	2022-04-24 16:24:09 +02:00
platform	platform/x86/intel: pmc/core: change pmc_lpm_modes to static	2022-04-27 16:55:54 +02:00
pnp	PNP update for 5.18-rc1	2022-03-21 14:46:01 -07:00
power	power: supply: Reset err after not finding static battery	2022-04-13 12:05:22 +02:00
powercap
pps	pps: generators: pps_gen_parport: Switch to use module_parport_driver()	2022-03-18 14:01:19 +01:00
ps3
ptp	ptp: ocp: handle error from nvmem_device_find	2022-03-30 12:08:11 -07:00
pwm
rapidio
ras
regulator	regulator: atc260x: Fix missing active_discharge_on setting	2022-04-04 08:59:43 +01:00
remoteproc	remoteproc updates for v5.18	2022-03-30 10:50:48 -07:00
reset	reset: tegra-bpmp: Restore Handle errors in BPMP response	2022-04-04 11:14:13 +02:00
rpmsg	rpmsg: ctrl: Introduce new RPMSG_CREATE/RELEASE_DEV_IOCTL controls	2022-03-13 11:49:53 -05:00
rtc	RTC for 5.18	2022-04-01 09:37:18 -07:00
s390	s390: cleanup timer API use	2022-03-27 22:18:39 +02:00
sbus
scsi	scsi: sr: Do not leak information in ioctl	2022-04-18 22:48:31 -04:00
sh
siox
slimbus
soc	soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang	2022-04-10 09:32:08 +08:00
soundwire	Char/Misc and other driver updates for 5.18-rc1	2022-03-28 12:27:35 -07:00
spi	spi: Fixes for v5.18	2022-04-19 10:30:43 -07:00
spmi
ssb
staging	staging: r8188eu: Fix PPPoE tag insertion on little endian systems	2022-04-04 16:35:20 +02:00
target	scsi: target: pscsi: Set SCF_TREAT_READ_AS_NORMAL flag only if there is valid data	2022-04-27 22:40:09 -04:00
tc
tee	tee: optee: add missing mutext_destroy in optee_ffa_probe	2022-04-05 08:56:26 +02:00
thermal	Merge branch 'thermal-int340x'	2022-04-28 16:51:24 +02:00
thunderbolt	thunderbolt: Add KUnit test for devices with no DisplayPort adapters	2022-05-12 09:22:36 +03:00
tty	tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()	2022-04-26 08:09:46 +02:00
uio
usb	usb: isp1760: Fix out-of-bounds array access	2022-05-19 18:10:59 +02:00
vdpa	virtio: fixes, cleanups	2022-04-05 10:40:52 -07:00
vfio	vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used	2022-04-13 11:37:44 -06:00
vhost	virtio: features, fixes	2022-03-31 13:57:15 -07:00
video	fbdev fixes and updates for kernel v5.18-rc5	2022-04-26 11:32:01 -07:00
virt	Random number generator fixes for Linux 5.18-rc1.	2022-03-31 14:51:34 -07:00
virtio	virtio: fixes, cleanups	2022-04-05 10:40:52 -07:00
visorbus
vlynq
vme
w1	w1: w1_therm: Add support for Maxim MAX31850 thermoelement IF.	2022-03-18 14:07:09 +01:00
watchdog	linux-watchdog 5.18-rc1 tag	2022-03-31 14:14:03 -07:00
xen	xen: Convert kmap() to kmap_local_page()	2022-04-20 15:22:18 -05:00
zorro
Kconfig
Makefile