Re: [PATCH] bus: mhi: core: Validate channel ID when processing command completions

From: Hemant Kumar
Date: Mon Apr 26 2021 - 20:47:18 EST




On 4/26/21 4:58 PM, Bhaumik Bhatt wrote:
MHI reads the channel ID from the event ring element sent by the
device which can be any value between 0 and 255. In order to
prevent any out of bound accesses, add a check against the maximum
number of channels supported by the controller and those channels
not configured yet so as to skip processing of that event ring
element.

Fixes: 1d3173a3bae7 ("bus: mhi: core: Add support for processing events from client device")
Signed-off-by: Bhaumik Bhatt <bbhatt@xxxxxxxxxxxxxx>
---
Reviewed-by: Hemant Kumar <hemantk@xxxxxxxxxxxxxx>

--
The Qualcomm Innovation Center, Inc. is a member of the Code Aurora Forum,
a Linux Foundation Collaborative Project