Christophe JAILLET f4b700c718 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() ... [ Upstream commit c6abce6033 ] 'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit. Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses. Fixes: 54309d6577 ("mtd: rawnand: fsl_upm: Implement exec_op()") Signed-off-by: Christophe JAILLET <christophe.jaillet@wanadoo.fr> Reviewed-by: Dan Carpenter <dan.carpenter@linaro.org> Signed-off-by: Miquel Raynal <miquel.raynal@bootlin.com> Link: https://lore.kernel.org/linux-mtd/cd01cba1c7eda58bdabaae174c78c067325803d2.1689803636.git.christophe.jaillet@wanadoo.fr Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-08-11 12:08:25 +02:00
..
chips	…
devices	…
hyperbus	…
lpddr	…
maps	…
nand	mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()	2023-08-11 12:08:25 +02:00
parsers	mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908	2023-07-19 16:22:16 +02:00
spi-nor	mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER flash	2023-05-17 11:53:29 +02:00
tests	…
ubi	ubi: Fix return value overwrite issue in try_write_vid_and_data()	2023-05-11 23:03:05 +09:00
Kconfig	…
Makefile	…
ftl.c	…
inftlcore.c	…
inftlmount.c	…
mtd_blkdevs.c	…
mtdblock.c	mtdblock: tolerate corrected bit-flips	2023-04-20 12:35:06 +02:00
mtdblock_ro.c	…
mtdchar.c	mtdchar: mark bits of ioctl handler noinline	2023-06-09 10:34:24 +02:00
mtdconcat.c	…
mtdcore.c	mtd: core: fix error path for nvmem provider	2023-05-11 23:03:40 +09:00
mtdcore.h	…
mtdoops.c	…
mtdpart.c	mtd: mtdpart: Don't create platform device that'll never probe	2023-03-10 09:33:38 +01:00
mtdpstore.c	…
mtdsuper.c	…
mtdswap.c	…
nftlcore.c	…
nftlmount.c	…
rfd_ftl.c	…
sm_ftl.c	…
sm_ftl.h	…
ssfdc.c	…