diff options
| author | Rasmus Villemoes | 2023-03-24 08:55:19 +0100 |
|---|---|---|
| committer | Patrice Chotard | 2023-04-19 10:02:28 +0200 |
| commit | daf07215e8c4aed16af81e1615396f5502040c1f (patch) | |
| tree | bc6f4a5b69b81b1761c2751511defabd97feb28a /drivers | |
| parent | bb0352009822239044ac7f2eafcdff8c71d56ed2 (diff) | |
stm32mp: fix various array bounds checks
In all these cases, the index on the LHS is immediately afterwards
used to access the array appearing in the ARRAY_SIZE() on the RHS - so
if that index is equal to the array size, we'll access
one-past-the-end of the array.
Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk>
Reviewed-by: Patrice Chotard <patrice.chotard@foss.st.com>
Reviewed-by: Patrick Delaunay <patrick.delaunay@foss.st.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/ram/stm32mp1/stm32mp1_interactive.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/ram/stm32mp1/stm32mp1_interactive.c b/drivers/ram/stm32mp1/stm32mp1_interactive.c index f0fe7e61e33..2c19847c663 100644 --- a/drivers/ram/stm32mp1/stm32mp1_interactive.c +++ b/drivers/ram/stm32mp1/stm32mp1_interactive.c @@ -391,7 +391,7 @@ bool stm32mp1_ddr_interactive(void *priv, if (next_step < 0) return false; - if (step < 0 || step > ARRAY_SIZE(step_str)) { + if (step < 0 || step >= ARRAY_SIZE(step_str)) { printf("** step %d ** INVALID\n", step); return false; } |