diff options
| author |   Xiangxu Yin <xiangxu.yin@oss.qualcomm.com> | 2026-02-27 20:15:01 +0800 |
|---|---|---|
| committer |   Vinod Koul <vkoul@kernel.org> | 2026-05-19 15:42:11 +0530 |
| commit | ea17fc4d7dc2ba6459b1a318962960520201baf1 (patch) | |
| tree | d72f22bfbc44176848322a9da8981d58f295d843 /include/linux/hsi/ssh:/git@git.zx2c4.com | |
| parent | phy: apple: atc: Fix typec switch/mux leak on unbind (diff) | |
phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
swing_tbl and pre_emphasis_tbl are 4x4 arrays (valid indices 0-3), but
the boundary check uses "> 4" instead of ">= 4", allowing index 4 to
cause an out-of-bounds access.
Reported-by: Dan Carpenter <dan.carpenter@linaro.org>
Fixes: 81791c45c8e0 ("phy: qcom: qmp-usbc: Add QCS615 USB/DP PHY config and DP mode support")
Signed-off-by: Xiangxu Yin <xiangxu.yin@oss.qualcomm.com>
Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Reviewed-by: Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
Link: https://patch.msgid.link/20260227-master-v1-1-8d91b9407fdb@oss.qualcomm.com
Signed-off-by: Vinod Koul <vkoul@kernel.org>
Diffstat (limited to 'include/linux/hsi/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions