mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
authorGeert Uytterhoeven <geert+renesas@glider.be>
Fri, 23 Feb 2018 12:44:19 +0000 (13:44 +0100)
committerUlf Hansson <ulf.hansson@linaro.org>
Tue, 27 Feb 2018 14:11:06 +0000 (15:11 +0100)
commit325501d9360eb42c7c51e6daa0d733844c1e790b
tree2bbdfee9413b755238973c4226abb06c27584bfa
parentf8870ae6e2d6be75b1accc2db981169fdfbea7ab
mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias

The hs_timing_cfg[] array is indexed using a value derived from the
"mshcN" alias in DT, which may lead to an out-of-bounds access.

Fix this by adding a range check.

Fixes: 361c7fe9b02eee7e ("mmc: dw_mmc-k3: add sd support for hi3660")
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Reviewed-by: Shawn Lin <shawn.lin@rock-chips.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Ulf Hansson <ulf.hansson@linaro.org>
drivers/mmc/host/dw_mmc-k3.c