Received: by 2002:ac0:a582:0:0:0:0:0 with SMTP id m2-v6csp4519809imm; Tue, 9 Oct 2018 00:29:26 -0700 (PDT) X-Google-Smtp-Source: ACcGV63XOeAY0ZcYEMDb6j3hhgV+bbkkNAAy3ntIf4qVioXsm9/ttiW+LghZg/Nv+au5aBUVs+U4 X-Received: by 2002:a63:c54a:: with SMTP id g10-v6mr23899559pgd.201.1539070165977; Tue, 09 Oct 2018 00:29:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1539070165; cv=none; d=google.com; s=arc-20160816; b=DAyLmP1o/MPF+7YkPNfHyzD0NAC7xsf6QYdt0O9bNcr0tva+vdoJ3Ay1SOZtnB06Uw EE/+rnjkKWOzIPnmNKlbaqlyIijuGnOVl3fG3100HeGGsDU3/cYtAoYl1j8eVx7jK7a5 drMC6eYzuQoBrfh6NUeIdTRSXiQCFokQq1oelfpOQxJpd9+b2nJQCsuiFjAKTEJZPVBp A7EvRLr0ejUbNLnsS9UAGF6pu+pX2v6pyjNn+Zqe61Z+uI/ofC3AA4Sgi4+LAVhs2AXe MOvfph0TzehlehSf/6sei1aUnYCQwC9MwfgDlybRzhSQOQCtpXAh2vsz2aSBEM9SN6x1 Glhg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=jGY8/YYWzNDvP2qEu97CE1ZFSpmKOPivp5c6rO25Ksk=; b=opGWLBPhh7WkakDIzhng69kFfr6mFiOdgVTKp07aWfLiF0wT18X+0/6NqPiabzON+L L1kTqVvy5r1nOwnkWHLRhC348YRgI/1MX7M1w85VFwKGJHB39vBzqTelpe+hZpD8WAV1 LV2JS4IQv67AxSw+2Hlp5+IMf0eM7GufuQgzppi4zxG3zrqemEguKHtoSVqPSh1MjFQ9 ueCQ79KGOd+bZHLy6bRDT7RaBWrW8dwM/HLyUsLAiWVN7baqdUEdp3HA17+tZfh6iU48 CBLDdpB1hONrK2jUGV4qVX43+4fxnznvpIk3QZGBjAw8N/LcsykDJWCHfkDQzkOjTmEm imzQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id k22-v6si19775396pgh.340.2018.10.09.00.29.11; Tue, 09 Oct 2018 00:29:25 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726483AbeJIOny (ORCPT + 99 others); Tue, 9 Oct 2018 10:43:54 -0400 Received: from mail.bootlin.com ([62.4.15.54]:42170 "EHLO mail.bootlin.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725855AbeJIOny (ORCPT ); Tue, 9 Oct 2018 10:43:54 -0400 Received: by mail.bootlin.com (Postfix, from userid 110) id 29BD8207A3; Tue, 9 Oct 2018 09:28:19 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mail.bootlin.com X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,SHORTCIRCUIT, URIBL_BLOCKED shortcircuit=ham autolearn=disabled version=3.4.0 Received: from qschulz (AAubervilliers-681-1-28-153.w90-88.abo.wanadoo.fr [90.88.148.153]) by mail.bootlin.com (Postfix) with ESMTPSA id EA96220712; Tue, 9 Oct 2018 09:28:08 +0200 (CEST) Date: Tue, 9 Oct 2018 09:28:08 +0200 From: Quentin Schulz To: "Gustavo A. R. Silva" Cc: Kishon Vijay Abraham I , "David S. Miller" , linux-kernel@vger.kernel.org Subject: Re: [PATCH 2/2] phy: ocelot-serdes: fix out-of-bounds read Message-ID: <20181009072808.5eynmktmkgjpi2ho@qschulz> References: <30c1dcb4a8d3707238fcf0a996b9e0bf0a4a7bbc.1539036280.git.gustavo@embeddedor.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="b4ojgugveeianwqy" Content-Disposition: inline In-Reply-To: <30c1dcb4a8d3707238fcf0a996b9e0bf0a4a7bbc.1539036280.git.gustavo@embeddedor.com> User-Agent: NeoMutt/20171215 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --b4ojgugveeianwqy Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi Gustavo, On Tue, Oct 09, 2018 at 12:22:33AM +0200, Gustavo A. R. Silva wrote: > Currently, there is an out-of-bounds read on array ctrl->phys, > once variable i reaches the maximum array size of SERDES_MAX > in the for loop. >=20 > Fix this by changing the condition in the for loop from > i <=3D SERDES_MAX to i < SERDES_MAX. >=20 Reviewed-by: Quentin Schulz Thanks, Quentin --b4ojgugveeianwqy Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXeEYjDsJh38OoyMzhLiadT7g8aMFAlu8WIgACgkQhLiadT7g 8aPENQ//Yku5/atqMQnfPkL9gPlXcwqnKzdLPoqg8STNzSFCL+/Z19M/1EhIQWHG DqY04THJUqXwNpFeFXeR3Ac1gsZ0juK71c6iDIveL81xuH6CFJyh3zX5iCr4NlBA h/qpxXc6//3HmnpoEMLZj8LzSwGi2nsfYuXbxgEAbQ8TmTruSaIBYyj41h78uBXk j3tWNYAZUXX/QkoKCK3S/UmhhM4wqc3vw9CiuUENAwWyq4uC0j+8xBYpMIzoyvWU gBimIVlNGZx+FefedTmS1AUrXT92QAcaoaT7/g1T2BcnHY2J0kvZy1Wk/1botn5q C5ywzft5xn7OxJ1WBeoXFz2oHFUA7+hehotqCfWcsJ8vWLQqxpJwzcaVFfo1OPik taCbiaBdsLugVjr9PIRZ4+4f9sSWCxfNK8sxY6PrNC89hF+BKbGA+YKJgVuK7Y6C K/s3tpl5uGcIHZ8nvQhWtEJnGnUEGau7GYkQLMfrgC96CRFcPcriRlcVL9M3cXfa 4Ey3NVT8X1p4v8EX7B6l1ItNB/Eo2FhnYY5j+rnxGZnj+UJh6qfUUhkwdxlr09rl fI9Yx/jwUVdXxw/INJBRx9z6MLvZRPUsAGLfp42VFfj0is1DqKJyb0rRI+ydnwTo G/n/DLxL6qrP6DF4WEJgqSgSPvgHTM/aZZEuv7I6Jx5eM9Re+w8= =q13U -----END PGP SIGNATURE----- --b4ojgugveeianwqy--