mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-10-06 08:46:46 +00:00
iio: dac: ad5770r: fix off-by-one check on maximum number of channels
Currently there is an off-by-one check on the number of channels that
will cause an arry overrun in array st->output_mode when calling the
function d5770r_store_output_range. Fix this by using >= rather than >
to check for maximum number of channels.
Addresses-Coverity: ("Out-of-bounds access")
Fixes: cbbb819837
("iio: dac: ad5770r: Add AD5770R support")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Reviewed-by: Alexandru Ardelean <alexandru.ardelean@analog.com>
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
This commit is contained in:
parent
3a63da26db
commit
dd6230ba1d
1 changed files with 1 additions and 1 deletions
|
@ -525,7 +525,7 @@ static int ad5770r_channel_config(struct ad5770r_state *st)
|
||||||
ret = fwnode_property_read_u32(child, "num", &num);
|
ret = fwnode_property_read_u32(child, "num", &num);
|
||||||
if (ret)
|
if (ret)
|
||||||
return ret;
|
return ret;
|
||||||
if (num > AD5770R_MAX_CHANNELS)
|
if (num >= AD5770R_MAX_CHANNELS)
|
||||||
return -EINVAL;
|
return -EINVAL;
|
||||||
|
|
||||||
ret = fwnode_property_read_u32_array(child,
|
ret = fwnode_property_read_u32_array(child,
|
||||||
|
|
Loading…
Reference in a new issue