2024-04-25 11:43:28

by marius.cristea

[permalink] [raw]
Subject: [PATCH v1] iio: adc: PAC1934: fix accessing out of bounds array index

From: Marius Cristea <[email protected]>

Fix accessing out of bounds array index for average
current and voltage measurements. The device itself has
only 4 channels, but in sysfs there are "fake"
channels for the average voltages and currents too.

Fixes: 0fb528c8255b: "iio: adc: adding support for PAC193x"
Reported-by: Conor Dooley <[email protected]>
Signed-off-by: Marius Cristea <[email protected]>
---
drivers/iio/adc/pac1934.c | 9 +++++++++
1 file changed, 9 insertions(+)

diff --git a/drivers/iio/adc/pac1934.c b/drivers/iio/adc/pac1934.c
index f751260605e4..456f12faa348 100644
--- a/drivers/iio/adc/pac1934.c
+++ b/drivers/iio/adc/pac1934.c
@@ -787,6 +787,15 @@ static int pac1934_read_raw(struct iio_dev *indio_dev,
s64 curr_energy;
int ret, channel = chan->channel - 1;

+ /*
+ * For AVG the index should be between 5 to 8.
+ * To calculate PAC1934_CH_VOLTAGE_AVERAGE,
+ * respectively PAC1934_CH_CURRENT real index, we need
+ * to remove the added offset (PAC1934_MAX_NUM_CHANNELS).
+ */
+ if (channel >= PAC1934_MAX_NUM_CHANNELS)
+ channel = channel - PAC1934_MAX_NUM_CHANNELS;
+
ret = pac1934_retrieve_data(info, PAC1934_MIN_UPDATE_WAIT_TIME_US);
if (ret < 0)
return ret;

base-commit: b80ad8e3cd2712b78b98804d1f59199680d8ed91
--
2.34.1



2024-04-25 12:23:16

by Conor Dooley

[permalink] [raw]
Subject: Re: [PATCH v1] iio: adc: PAC1934: fix accessing out of bounds array index

On Thu, Apr 25, 2024 at 02:42:32PM +0300, [email protected] wrote:
> From: Marius Cristea <[email protected]>
>
> Fix accessing out of bounds array index for average
> current and voltage measurements. The device itself has
> only 4 channels, but in sysfs there are "fake"
> channels for the average voltages and currents too.
>
> Fixes: 0fb528c8255b: "iio: adc: adding support for PAC193x"
> Reported-by: Conor Dooley <[email protected]>
> Signed-off-by: Marius Cristea <[email protected]>
> ---
> drivers/iio/adc/pac1934.c | 9 +++++++++
> 1 file changed, 9 insertions(+)
>
> diff --git a/drivers/iio/adc/pac1934.c b/drivers/iio/adc/pac1934.c
> index f751260605e4..456f12faa348 100644
> --- a/drivers/iio/adc/pac1934.c
> +++ b/drivers/iio/adc/pac1934.c
> @@ -787,6 +787,15 @@ static int pac1934_read_raw(struct iio_dev *indio_dev,
> s64 curr_energy;
> int ret, channel = chan->channel - 1;
>
> + /*
> + * For AVG the index should be between 5 to 8.
> + * To calculate PAC1934_CH_VOLTAGE_AVERAGE,
> + * respectively PAC1934_CH_CURRENT real index, we need
> + * to remove the added offset (PAC1934_MAX_NUM_CHANNELS).
> + */
> + if (channel >= PAC1934_MAX_NUM_CHANNELS)
> + channel = channel - PAC1934_MAX_NUM_CHANNELS;
> +
> ret = pac1934_retrieve_data(info, PAC1934_MIN_UPDATE_WAIT_TIME_US);
> if (ret < 0)
> return ret;
>
> base-commit: b80ad8e3cd2712b78b98804d1f59199680d8ed91
> --
> 2.34.1
>


Attachments:
(No filename) (1.47 kB)
signature.asc (235.00 B)
Download all attachments

2024-04-25 15:36:31

by Conor Dooley

[permalink] [raw]
Subject: Re: [PATCH v1] iio: adc: PAC1934: fix accessing out of bounds array index

On Thu, Apr 25, 2024 at 01:22:45PM +0100, Conor Dooley wrote:
> On Thu, Apr 25, 2024 at 02:42:32PM +0300, [email protected] wrote:
> > From: Marius Cristea <[email protected]>
> >
> > Fix accessing out of bounds array index for average
> > current and voltage measurements. The device itself has
> > only 4 channels, but in sysfs there are "fake"
> > channels for the average voltages and currents too.
> >
> > Fixes: 0fb528c8255b: "iio: adc: adding support for PAC193x"
> > Reported-by: Conor Dooley <[email protected]>
> > Signed-off-by: Marius Cristea <[email protected]>


Huh, this is an empty message. I intended to send some tags, but must
not have saved the buffer.

Closes: https://lore.kernel.org/linux-iio/20240405-embellish-bonnet-ab5f10560d93@wendy/
Tested-by: Conor Dooley <[email protected]>

Cheers,
Conor.

> > ---
> > drivers/iio/adc/pac1934.c | 9 +++++++++
> > 1 file changed, 9 insertions(+)
> >
> > diff --git a/drivers/iio/adc/pac1934.c b/drivers/iio/adc/pac1934.c
> > index f751260605e4..456f12faa348 100644
> > --- a/drivers/iio/adc/pac1934.c
> > +++ b/drivers/iio/adc/pac1934.c
> > @@ -787,6 +787,15 @@ static int pac1934_read_raw(struct iio_dev *indio_dev,
> > s64 curr_energy;
> > int ret, channel = chan->channel - 1;
> >
> > + /*
> > + * For AVG the index should be between 5 to 8.
> > + * To calculate PAC1934_CH_VOLTAGE_AVERAGE,
> > + * respectively PAC1934_CH_CURRENT real index, we need
> > + * to remove the added offset (PAC1934_MAX_NUM_CHANNELS).
> > + */
> > + if (channel >= PAC1934_MAX_NUM_CHANNELS)
> > + channel = channel - PAC1934_MAX_NUM_CHANNELS;
> > +
> > ret = pac1934_retrieve_data(info, PAC1934_MIN_UPDATE_WAIT_TIME_US);
> > if (ret < 0)
> > return ret;
> >
> > base-commit: b80ad8e3cd2712b78b98804d1f59199680d8ed91
> > --
> > 2.34.1
> >



Attachments:
(No filename) (1.88 kB)
signature.asc (235.00 B)
Download all attachments

2024-04-28 13:32:54

by Jonathan Cameron

[permalink] [raw]
Subject: Re: [PATCH v1] iio: adc: PAC1934: fix accessing out of bounds array index

On Thu, 25 Apr 2024 16:36:19 +0100
Conor Dooley <[email protected]> wrote:

> On Thu, Apr 25, 2024 at 01:22:45PM +0100, Conor Dooley wrote:
> > On Thu, Apr 25, 2024 at 02:42:32PM +0300, [email protected] wrote:
> > > From: Marius Cristea <[email protected]>
> > >
> > > Fix accessing out of bounds array index for average
> > > current and voltage measurements. The device itself has
> > > only 4 channels, but in sysfs there are "fake"
> > > channels for the average voltages and currents too.
> > >
> > > Fixes: 0fb528c8255b: "iio: adc: adding support for PAC193x"
> > > Reported-by: Conor Dooley <[email protected]>
> > > Signed-off-by: Marius Cristea <[email protected]>
>
>
> Huh, this is an empty message. I intended to send some tags, but must
> not have saved the buffer.
>
> Closes: https://lore.kernel.org/linux-iio/20240405-embellish-bonnet-ab5f10560d93@wendy/
> Tested-by: Conor Dooley <[email protected]>
Applied to the fixes-togreg branch of iio.git

Thanks,

Jonathan

>
> Cheers,
> Conor.
>
> > > ---
> > > drivers/iio/adc/pac1934.c | 9 +++++++++
> > > 1 file changed, 9 insertions(+)
> > >
> > > diff --git a/drivers/iio/adc/pac1934.c b/drivers/iio/adc/pac1934.c
> > > index f751260605e4..456f12faa348 100644
> > > --- a/drivers/iio/adc/pac1934.c
> > > +++ b/drivers/iio/adc/pac1934.c
> > > @@ -787,6 +787,15 @@ static int pac1934_read_raw(struct iio_dev *indio_dev,
> > > s64 curr_energy;
> > > int ret, channel = chan->channel - 1;
> > >
> > > + /*
> > > + * For AVG the index should be between 5 to 8.
> > > + * To calculate PAC1934_CH_VOLTAGE_AVERAGE,
> > > + * respectively PAC1934_CH_CURRENT real index, we need
> > > + * to remove the added offset (PAC1934_MAX_NUM_CHANNELS).
> > > + */
> > > + if (channel >= PAC1934_MAX_NUM_CHANNELS)
> > > + channel = channel - PAC1934_MAX_NUM_CHANNELS;
> > > +
> > > ret = pac1934_retrieve_data(info, PAC1934_MIN_UPDATE_WAIT_TIME_US);
> > > if (ret < 0)
> > > return ret;
> > >
> > > base-commit: b80ad8e3cd2712b78b98804d1f59199680d8ed91
> > > --
> > > 2.34.1
> > >
>
>