Difuse/u-boot
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

soc: soc_ti_k3: fix revision array bounds checks

Browse source 
If rev is equal to the array size, we'll access the array
one-past-the-end.

Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk>
Reviewed-by: Bryan Brattlof <bb@ti.com>
This commit is contained in:
Rasmus Villemoes 2023-03-24 08:44:29 +01:00 committed by Tom Rini
parent c1da6fdb5c
commit 45981a9a37
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
drivers/soc/soc_ti_k3.c
View file

@ -70,12 +70,12 @@ static const char *get_rev_string(u32 idreg)
switch (soc) { switch (soc) {
case JTAG_ID_PARTNO_J721E: case JTAG_ID_PARTNO_J721E:
if (rev > ARRAY_SIZE(j721e_rev_string_map)) if (rev >= ARRAY_SIZE(j721e_rev_string_map))
goto bail; goto bail;
return j721e_rev_string_map[rev]; return j721e_rev_string_map[rev];
default: default:
if (rev > ARRAY_SIZE(typical_rev_string_map)) if (rev >= ARRAY_SIZE(typical_rev_string_map))
goto bail; goto bail;
return typical_rev_string_map[rev]; return typical_rev_string_map[rev];
}; };