iio: filter: admv8818: close potential out-of-bounds read in __admv8818_read_[h|l...
authorWei Yongjun <weiyongjun1@huawei.com>
Thu, 22 Sep 2022 11:58:48 +0000 (11:58 +0000)
committerJonathan Cameron <Jonathan.Cameron@huawei.com>
Wed, 23 Nov 2022 19:43:57 +0000 (19:43 +0000)
commit3f4033a811bcd1a1f077ce5297488a5c4dd30eb1
treeadb14af6a3c73c706f3a191585321c4f507e0fcd
parent8cf5f0329128efdfe18f12a8697752d39821fbdf
iio: filter: admv8818: close potential out-of-bounds read in __admv8818_read_[h|l]pf_freq()

ADMV8818_SW_IN_WR0_MSK and ADMV8818_SW_OUT_WR0_MSK have 3 bits,
which means a length of 8, but freq_range_hpf and freq_range_lpf
array size is 4, may end up reading 4 elements beyond the end of
those arrays.

Check value first before access freq_range_hpf and freq_range_lpf
to harden against the hardware allowing out of range values.

Signed-off-by: Wei Yongjun <weiyongjun1@huawei.com>
Reviewed-by: Antoniu Miclaus <antoniu.miclaus@analog.com>
Link: https://lore.kernel.org/r/20220922115848.1800021-1-weiyongjun@huaweicloud.com
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
drivers/iio/filter/admv8818.c