]> git.itanic.dy.fi Git - linux-stable/commit
serial: 8250_pci1xxxx: fix off by one in pci1xxxx_process_read_data()
authorDan Carpenter <dan.carpenter@linaro.org>
Wed, 10 Jan 2024 19:25:21 +0000 (22:25 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 28 Jan 2024 03:08:16 +0000 (19:08 -0800)
commit86ee55e9bc7ff7308eda67e5bcb3f8c834c7c113
tree34c5a9392642fc66f87dac12094af673ba633a5a
parente15c99be0c915bbe70dfe55450d268d7bd5bdac8
serial: 8250_pci1xxxx: fix off by one in pci1xxxx_process_read_data()

These > comparisons should be >= to prevent writing one element beyond
the end of the rx_buff[] array.  The rx_buff[] buffer has RX_BUF_SIZE
elements.  Fix the buffer overflow.

Fixes: aba8290f368d ("8250: microchip: pci1xxxx: Add Burst mode reception support in uart driver for writing into FIFO")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Link: https://lore.kernel.org/r/ZZ7vIfj7Jgh-pJn8@moroto
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/tty/serial/8250/8250_pci1xxxx.c