Revision ef15ddeeb6bee87c044bf7754fac524545bf71e8 authored by Aleksandr Mishin on 28 March 2024, 16:55:05 UTC, committed by David S. Miller on 03 April 2024, 10:00:33 UTC
In rvu_map_cgx_lmac_pf() the 'iter', which is used as an array index, can reach
value (up to 14) that exceed the size (MAX_LMAC_COUNT = 8) of the array.
Fix this bug by adding 'iter' value check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 91c6945ea1f9 ("octeontx2-af: cn10k: Add RPM MAC support")
Signed-off-by: Aleksandr Mishin <amishin@t-argos.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent c53fe72
History
File Mode Size
prom
Makefile -rw-r--r-- 211 bytes
config.c -rw-r--r-- 5.3 KB
dvma.c -rw-r--r-- 1.3 KB
idprom.c -rw-r--r-- 4.4 KB
intersil.c -rw-r--r-- 1.7 KB
leds.c -rw-r--r-- 273 bytes
mmu_emu.c -rw-r--r-- 11.6 KB
sun3.h -rw-r--r-- 483 bytes
sun3dvma.c -rw-r--r-- 6.7 KB
sun3ints.c -rw-r--r-- 2.1 KB

back to top