OSDN Git Service

drm/bridge: it6505: Fix the read buffer array bound
authorHsin-Yi Wang <hsinyi@chromium.org>
Mon, 28 Feb 2022 08:14:21 +0000 (16:14 +0800)
committerRobert Foss <robert.foss@linaro.org>
Mon, 28 Feb 2022 15:10:13 +0000 (16:10 +0100)
commite22dfdb63df36427067fad6b9bfdc8c08371ab38
tree951006d944b35447f3236e5cb79153b403430884
parentf85b3f806e4d43a0e3e5c042f40b7fe5faf2f6cf
drm/bridge: it6505: Fix the read buffer array bound

The size of read_buf is READ_BUFFER_SIZE (200), so we can't access it
with read_buf + PAGE_SIZE (4096). Extend the READ_BUFFER_SIZE to 400 and
set the end position to read_buf + READ_BUFFER_SIZE.

Fixes: b5c84a9edcd418 ("drm/bridge: add it6505 driver")
Reported-by: Mark Brown <broonie@kernel.org>
Signed-off-by: Hsin-Yi Wang <hsinyi@chromium.org>
Signed-off-by: Robert Foss <robert.foss@linaro.org>
Link: https://patchwork.freedesktop.org/patch/msgid/20220228081421.1504213-1-hsinyi@chromium.org
drivers/gpu/drm/bridge/ite-it6505.c