linux/drivers/mailbox
Dan Carpenter bd8e3189b8 mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate()
[ Upstream commit 78f3ff524f ]

The > comparison should be >= or we access one element beyond the end
of the array.

(The inst->qinsts[] array is allocated in the ti_msgmgr_probe() function
and it has ->num_valid_queues elements.)

Fixes: a2b79838b8 ("mailbox: ti-msgmgr: Add support for Secure Proxy")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Nishanth Menon <nm@ti.com>
Signed-off-by: Jassi Brar <jaswinder.singh@linaro.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-01-27 14:50:04 +01:00
..
arm_mhu.c
bcm-flexrm-mailbox.c mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue 2019-03-23 20:09:49 +01:00
bcm-pdc-mailbox.c
bcm2835-mailbox.c
hi3660-mailbox.c
hi6220-mailbox.c
imx-mailbox.c mailbox: imx: Fix Tx doorbell shutdown path 2020-01-04 19:13:17 +01:00
Kconfig mailbox: Add support for i.MX messaging unit 2018-08-15 09:53:07 +05:30
mailbox-altera.c
mailbox-sti.c
mailbox-test.c mailbox: mailbox-test: fix null pointer if no mmio 2019-12-05 09:21:35 +01:00
mailbox-xgene-slimpro.c
mailbox.c mailbox: handle failed named mailbox channel request 2019-07-31 07:27:07 +02:00
mailbox.h
Makefile mailbox: Add support for i.MX messaging unit 2018-08-15 09:53:07 +05:30
mtk-cmdq-mailbox.c mailbox: mediatek: Add check for possible failure of kzalloc 2020-01-27 14:49:56 +01:00
omap-mailbox.c mailbox/omap: use of_device_get_match_data() to get match data 2018-08-03 18:57:15 +05:30
pcc.c mailbox: PCC: handle parse error 2018-11-13 11:08:18 -08:00
pl320-ipc.c
platform_mhu.c
qcom-apcs-ipc-mailbox.c mbox: qcom: add APCS child device for QCS404 2019-10-07 18:57:02 +02:00
rockchip-mailbox.c
stm32-ipcc.c mailbox: stm32_ipcc: add spinlock to fix channels concurrent access 2019-12-05 09:21:34 +01:00
tegra-hsp.c
ti-msgmgr.c mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate() 2020-01-27 14:50:04 +01:00