Unverified Commit e804018e authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15081 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Xia Fukun <xiafukun@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/LXIH6HD7KB6NFVOGARUJ3M3PG45CHCQA/ 
 
https://gitee.com/src-openeuler/kernel/issues/IB5AV7 
 
Link:https://gitee.com/openeuler/kernel/pulls/15081

 

Reviewed-by: default avatarZucheng Zheng <zhengzucheng@huawei.com>
Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 477dce52 7c113a98

drivers/usb/typec/ucsi/ucsi_ccg.c

+2 −0
Original line number Diff line number Diff line
@@ -436,6 +436,8 @@ static void ucsi_ccg_update_set_new_cam_cmd(struct ucsi_ccg *uc, 


	port = uc->orig;

	new_cam = UCSI_SET_NEW_CAM_GET_AM(*cmd);

	if (new_cam >= ARRAY_SIZE(uc->updated))

		return;

	new_port = &uc->updated[new_cam];

	cam = new_port->linked_idx;

	enter_new_mode = UCSI_SET_NEW_CAM_ENTER(*cmd);