diff options
| author |   kettenis <kettenis@openbsd.org> | 2020-04-25 22:15:00 +0000 |
|---|---|---|
| committer | kettenis <kettenis@openbsd.org> | 2020-04-25 22:15:00 +0000 |
| commit | 04e84c75d4547ef146ef8f6ecd64fa92b50f1f61 (patch) | |
| tree | 3ad31d354b3a8b662be0e073edf702aa3bb1766b | |
| parent | Note extra Term-ReadKey build dependency on Cwd (diff) | |
| download | wireguard-openbsd-04e84c75d4547ef146ef8f6ecd64fa92b50f1f61.tar.xz wireguard-openbsd-04e84c75d4547ef146ef8f6ecd64fa92b50f1f61.zip | |
Explicitly check that the length of the "brcm,pull" property is greater
than zero to avoid a null-pointer dereference caused by unexpected
(at least by me) type promotion.
ok patrick@
| -rw-r--r-- | sys/dev/fdt/bcm2835_gpio.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/dev/fdt/bcm2835_gpio.c b/sys/dev/fdt/bcm2835_gpio.c index 4d9d0ab3426..aaa1a6015ee 100644 --- a/sys/dev/fdt/bcm2835_gpio.c +++ b/sys/dev/fdt/bcm2835_gpio.c @@ -1,4 +1,4 @@ -/* $OpenBSD: bcm2835_gpio.c,v 1.1 2020/04/24 09:52:43 kettenis Exp $ */ +/* $OpenBSD: bcm2835_gpio.c,v 1.2 2020/04/25 22:15:00 kettenis Exp $ */ /* * Copyright (c) 2020 Mark Kettenis <kettenis@openbsd.org> * @@ -118,7 +118,7 @@ bcmgpio_config_func(struct bcmgpio_softc *sc, int pin, int func) int reg = (pin / 10); int shift = (pin % 10) * 3; uint32_t val; - + val = HREAD4(sc, GPFSEL(reg)); val &= ~(GPFSEL_MASK << shift); HWRITE4(sc, GPFSEL(reg), val); @@ -184,7 +184,7 @@ bcmgpio_pinctrl(uint32_t phandle, void *cookie) for (i = 0; i < len / sizeof(uint32_t); i++) { bcmgpio_config_func(sc, pins[i], func); - if (i < plen / sizeof(uint32_t)) + if (plen > 0 && i < plen / sizeof(uint32_t)) sc->sc_config_pull(sc, pins[i], pull[i]); } |