MIPS: cavium-octeon: fix out-of-bounds array access
authorAaro Koskinen <aaro.koskinen@nsn.com>
Fri, 1 Nov 2013 15:06:03 +0000 (17:06 +0200)
committerRalf Baechle <ralf@linux-mips.org>
Thu, 23 Jan 2014 12:02:34 +0000 (13:02 +0100)
When booting with in-kernel DTBs, the pruning code will enumerate
interfaces 0-4. However, there is memory reserved only for 4 so some
other data will get overwritten by cvmx_helper_interface_enumerate().

Signed-off-by: Aaro Koskinen <aaro.koskinen@nsn.com>
Acked-by: David Daney <david.daney@cavium.com>
Signed-off-by: John Crispin <blogic@openwrt.org>
Patchwork: http://patchwork.linux-mips.org/patch/6102/

arch/mips/cavium-octeon/executive/cvmx-helper.c

index d63d20dfbfb0d0b23bd5b681e658595f7a7b76b4..0e4b34036815be3dcf9fa967537e6098448fde06 100644 (file)
@@ -67,7 +67,7 @@ void (*cvmx_override_pko_queue_priority) (int pko_port,
 void (*cvmx_override_ipd_port_setup) (int ipd_port);
 
 /* Port count per interface */
-static int interface_port_count[4] = { 0, 0, 0, 0 };
+static int interface_port_count[5];
 
 /* Port last configured link info index by IPD/PKO port */
 static cvmx_helper_link_info_t