Dan Carpenter bd8e3189b8 mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate() ... [ Upstream commit 78f3ff524f ] The > comparison should be >= or we access one element beyond the end of the array. (The inst->qinsts[] array is allocated in the ti_msgmgr_probe() function and it has ->num_valid_queues elements.) Fixes: a2b79838b8 ("mailbox: ti-msgmgr: Add support for Secure Proxy") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Nishanth Menon <nm@ti.com> Signed-off-by: Jassi Brar <jaswinder.singh@linaro.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-01-27 14:50:04 +01:00
..
arm_mhu.c
bcm-flexrm-mailbox.c
bcm-pdc-mailbox.c
bcm2835-mailbox.c
hi3660-mailbox.c
hi6220-mailbox.c
imx-mailbox.c	mailbox: imx: Fix Tx doorbell shutdown path	2020-01-04 19:13:17 +01:00
Kconfig
mailbox-altera.c
mailbox-sti.c
mailbox-test.c	mailbox: mailbox-test: fix null pointer if no mmio	2019-12-05 09:21:35 +01:00
mailbox-xgene-slimpro.c
mailbox.c	mailbox: handle failed named mailbox channel request	2019-07-31 07:27:07 +02:00
mailbox.h
Makefile
mtk-cmdq-mailbox.c	mailbox: mediatek: Add check for possible failure of kzalloc	2020-01-27 14:49:56 +01:00
omap-mailbox.c
pcc.c
pl320-ipc.c
platform_mhu.c
qcom-apcs-ipc-mailbox.c	mbox: qcom: add APCS child device for QCS404	2019-10-07 18:57:02 +02:00
rockchip-mailbox.c
stm32-ipcc.c	mailbox: stm32_ipcc: add spinlock to fix channels concurrent access	2019-12-05 09:21:34 +01:00
tegra-hsp.c
ti-msgmgr.c	mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate()	2020-01-27 14:50:04 +01:00