diff options
| author | Johan Hovold <johan@kernel.org> | 2025-10-20 06:53:14 +0200 |
|---|---|---|
| committer | Joerg Roedel <joerg.roedel@amd.com> | 2025-11-17 09:49:44 +0100 |
| commit | ab31cf041e4916bdf5c6b60a5286521c806a7033 (patch) | |
| tree | 94b9eaa40a98d24570f04d836a0f0a77ab4fa5a4 | |
| parent | 46207625c9f33da0e43bb4ae1e91f0791b6ed633 (diff) | |
iommu/mediatek-v1: add missing larb count sanity check
Add the missing larb count sanity check to avoid writing beyond a fixed
sized array in case of a malformed devicetree.
Acked-by: Robin Murphy <robin.murphy@arm.com>
Reviewed-by: Yong Wu <yong.wu@mediatek.com>
Signed-off-by: Johan Hovold <johan@kernel.org>
Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com>
Signed-off-by: Joerg Roedel <joerg.roedel@amd.com>
| -rw-r--r-- | drivers/iommu/mtk_iommu_v1.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/iommu/mtk_iommu_v1.c b/drivers/iommu/mtk_iommu_v1.c index 86686455e911..c8d8eff5373d 100644 --- a/drivers/iommu/mtk_iommu_v1.c +++ b/drivers/iommu/mtk_iommu_v1.c @@ -646,6 +646,9 @@ static int mtk_iommu_v1_probe(struct platform_device *pdev) if (larb_nr < 0) return larb_nr; + if (larb_nr > MTK_LARB_NR_MAX) + return -EINVAL; + for (i = 0; i < larb_nr; i++) { struct device_node *larbnode; struct platform_device *plarbdev; |