projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d5bd1eb) | patch
iio: ad5755: fix off-by-one on devnr limit check
authorColin Ian King <colin.king@canonical.com>
Mon, 25 Jul 2016 22:40:01 +0000 (23:40 +0100)
committerJonathan Cameron <jic23@kernel.org>
Mon, 29 Aug 2016 15:15:24 +0000 (16:15 +0100)
commit9d47964bfd471f0dd4c89f28556aec68bffa0020
tree2d8019f310f52bc66da8d8ae9ba3540050d10a3ftree | snapshot (tar.gz zip)
parentd5bd1eba19230347acfc4960581a15bfb459a615commit | diff
iio: ad5755: fix off-by-one on devnr limit check

The comparison for devnr limits is off-by-one, the current check
allows 0 to AD5755_NUM_CHANNELS and the limit should be in fact
0 to AD5755_NUM_CHANNELS - 1.  This can lead to an out of bounds
write to pdata->dac[devnr]. Fix this by replacing > with >= on the
comparison.

Signed-off-by: Colin Ian King <colin.king@canonical.com>
Fixes: c947459979c6 ("iio: ad5755: add support for dt bindings")
Signed-off-by: Jonathan Cameron <jic23@kernel.org>
drivers/iio/dac/ad5755.c diff | blob | blame | history