power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
stable inclusion from stable-v5.10.150 commit 89f305a71418591cdda18180f712f91c9820f03b category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I6D0XA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=89f305a71418591cdda18180f712f91c9820f03b -------------------------------- [ Upstream commit 9d47e01b ] ADP5061_CHG_STATUS_1_CHG_STATUS is masked with 0x07, which means a length of 8, but adp5061_chg_type array size is 4, may end up reading 4 elements beyond the end of the adp5061_chg_type[] array. Signed-off-by:Wei Yongjun <weiyongjun1@huawei.com> Acked-by:
Michael Hennerich <michael.hennerich@analog.com> Signed-off-by:
Sebastian Reichel <sebastian.reichel@collabora.com> Signed-off-by:
Sasha Levin <sashal@kernel.org> Signed-off-by:
Jialin Zhang <zhangjialin11@huawei.com>
Loading
Please sign in to comment