Unverified Commit 423fd697 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14991 usb: typec: fix potential array underflow in ucsi_ccg_sync_control() 

Merge Pull Request from: @ci-robot 
 
PR sync from: GONG Ruiqi <gongruiqi1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/CCKQHQGKGOM7OFXYX4Z5KD7D73K4FREL/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBEAFV 
 
Link:https://gitee.com/openeuler/kernel/pulls/14991

 

Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents d56a24f3 225d9c23

drivers/usb/typec/ucsi/ucsi_ccg.c

+4 −0
Original line number Diff line number Diff line
@@ -571,6 +571,10 @@ static int ucsi_ccg_sync_write(struct ucsi *ucsi, unsigned int offset, 
		    uc->has_multiple_dp) {

			con_index = (uc->last_cmd_sent >> 16) &

				    UCSI_CMD_CONNECTOR_MASK;

			if (con_index == 0) {

				ret = -EINVAL;

				goto err_clear_bit;

			}

			con = &uc->ucsi->connector[con_index - 1];

			ucsi_ccg_update_set_new_cam_cmd(uc, con, (u64 *)val);

		}