media: venus: core,pm: fix potential infinite loop
authorColin Ian King <colin.king@canonical.com>
Wed, 7 Apr 2021 13:48:31 +0000 (15:48 +0200)
committerMauro Carvalho Chehab <mchehab+huawei@kernel.org>
Thu, 15 Apr 2021 11:12:35 +0000 (13:12 +0200)
The for-loop iterates with a u8 loop counter i and compares this
with the loop upper limit of res->resets_num which is an unsigned
int type.  There is a potential infinite loop if res->resets_num
is larger than the u8 loop counter i. Fix this by making the loop
counter the same type as res->resets_num.

Addresses-Coverity: ("Infinite loop")

Fixes: 3bca43585e22 ("media: venus: core,pm: Add handling for resets")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Stanimir Varbanov <stanimir.varbanov@linaro.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+huawei@kernel.org>
drivers/media/platform/qcom/venus/pm_helpers.c

index dfe3ee8..5c0a9aa 100644 (file)
@@ -868,7 +868,7 @@ skip_pmdomains:
 static int core_resets_reset(struct venus_core *core)
 {
        const struct venus_resources *res = core->res;
-       unsigned char i;
+       unsigned int i;
        int ret;
 
        if (!res->resets_num)
@@ -893,7 +893,7 @@ static int core_resets_get(struct venus_core *core)
 {
        struct device *dev = core->dev;
        const struct venus_resources *res = core->res;
-       unsigned char i;
+       unsigned int i;
        int ret;
 
        if (!res->resets_num)