diff options
| author | Andrew Goodbody <andrew.goodbody@linaro.org> | 2025-08-08 12:32:36 +0100 |
|---|---|---|
| committer | Marek Vasut <marek.vasut+renesas@mailbox.org> | 2025-08-20 23:02:55 +0200 |
| commit | b34b18a2c936c02c42c1c66bee274fcc96e25c57 (patch) | |
| tree | 699f654d774d19f0c8f92641f2c6e7215f880923 /drivers/fpga/intel_sdm_mb.c | |
| parent | 54fbdd408873413af86d86de03a490c5abf280f1 (diff) | |
ram: renesas: dbsc5: Fix off by 1 errors
In dbsc5_read_vref_training the arrays dvw_min_byte0_table and
dvw_min_byte1_table have 128 elements per channel. The variable
vref_stop_index is limited to be a maximum of 128. This means that the
index used to access the arrays must use a test of '< vref_stop_index'
rather than '<= vref_stop_index' in order to prevent out of bounds
accesses to the arrays.
This issue was found by Smatch.
Signed-off-by: Andrew Goodbody <andrew.goodbody@linaro.org>
Reviewed-by: Marek Vasut <marek.vasut+renesas@mailbox.org>
Tested-by: Marek Vasut <marek.vasut+renesas@mailbox.org>
Diffstat (limited to 'drivers/fpga/intel_sdm_mb.c')
0 files changed, 0 insertions, 0 deletions