Re: [PATCH v3 3/9] bus: mhi: core: Add range check for channel id received in event ring
From: Jeffrey Hugo
Date: Thu Apr 30 2020 - 10:26:58 EST
On 4/29/2020 2:52 PM, Bhaumik Bhatt wrote:
From: Hemant Kumar <hemantk@xxxxxxxxxxxxxx>
MHI data completion handler function reads channel id from event
ring element. Value is under the control of MHI devices and can be
any value between 0 and 255. In order to prevent out of bound access
add a bound check against the max channel supported by controller
and skip processing of that event ring element.
Signed-off-by: Hemant Kumar <hemantk@xxxxxxxxxxxxxx>
Signed-off-by: Bhaumik Bhatt <bbhatt@xxxxxxxxxxxxxx>
---
Reviewed-by: Jeffrey Hugo <jhugo@xxxxxxxxxxxxxx>
--
Jeffrey Hugo
Qualcomm Technologies, Inc. is a member of the
Code Aurora Forum, a Linux Foundation Collaborative Project.