diff options
| author | Linus Walleij <linusw@kernel.org> | 2026-09-27 11:03:30 +0200 |
|---|---|---|
| committer | Vinod Koul <vkoul@kernel.org> | 2026-10-05 17:37:45 +0200 |
| commit | 9f1064ebe17cf3ab65ac6eb166398e02678aea33 (patch) | |
| tree | 787681534fa5949523fa3488c3b9a44842b99b2e /tools/lib/python/kdoc/parse_data_structs.py | |
| parent | c96e9f056095825b5f8d4a11f4107fc174892f92 (diff) | |
dmaengine: ste_dma40: Validate DMA specifier length
The DMA40 binding requires three cells, but d40_xlate() reads args[0],
args[1], and args[2] without checking args_count. A malformed provider node
can specify fewer cells, leaving some of these values uninitialized when
the OF DMA core invokes the translation callback.
Reject specifiers that do not contain exactly three cells before reading
the argument array.
Fixes: fa332de5c6b3 ("dmaengine: ste_dma40: Supply full Device Tree parsing support")
Assisted-by: LLM
Reviewed-by: Frank Li <Frank.Li@nxp.com>
Signed-off-by: Linus Walleij <linusw@kernel.org>
Link: https://patch.msgid.link/20260927-dma40-fixes-v7-17-89f595e8851d@kernel.org
Signed-off-by: Vinod Koul <vkoul@kernel.org>
Diffstat (limited to 'tools/lib/python/kdoc/parse_data_structs.py')
0 files changed, 0 insertions, 0 deletions