Revision ef15ddeeb6bee87c044bf7754fac524545bf71e8 authored by Aleksandr Mishin on 28 March 2024, 16:55:05 UTC, committed by David S. Miller on 03 April 2024, 10:00:33 UTC
In rvu_map_cgx_lmac_pf() the 'iter', which is used as an array index, can reach
value (up to 14) that exceed the size (MAX_LMAC_COUNT = 8) of the array.
Fix this bug by adding 'iter' value check.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes: 91c6945ea1f9 ("octeontx2-af: cn10k: Add RPM MAC support")
Signed-off-by: Aleksandr Mishin <amishin@t-argos.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent c53fe72
| File | Mode | Size |
|---|---|---|
| Kconfig | -rw-r--r-- | 527 bytes |
| Makefile | -rw-r--r-- | 291 bytes |
| attr.c | -rw-r--r-- | 3.1 KB |
| bfind.c | -rw-r--r-- | 4.9 KB |
| bitmap.c | -rw-r--r-- | 5.8 KB |
| bnode.c | -rw-r--r-- | 11.5 KB |
| brec.c | -rw-r--r-- | 13.6 KB |
| btree.c | -rw-r--r-- | 9.0 KB |
| btree.h | -rw-r--r-- | 5.3 KB |
| catalog.c | -rw-r--r-- | 9.8 KB |
| dir.c | -rw-r--r-- | 8.0 KB |
| extent.c | -rw-r--r-- | 14.0 KB |
| hfs.h | -rw-r--r-- | 9.1 KB |
| hfs_fs.h | -rw-r--r-- | 9.3 KB |
| inode.c | -rw-r--r-- | 18.7 KB |
| mdb.c | -rw-r--r-- | 10.1 KB |
| part_tbl.c | -rw-r--r-- | 2.9 KB |
| string.c | -rw-r--r-- | 3.7 KB |
| super.c | -rw-r--r-- | 12.1 KB |
| sysdep.c | -rw-r--r-- | 1.2 KB |
| trans.c | -rw-r--r-- | 3.4 KB |
Computing file changes ...
