mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2026-09-22 09:34:56 +02:00
fbdev: omapfb: off by one in omapfb_register_client()
[ Upstream commit5ec1ec35b2] The omapfb_register_client[] array has OMAPFB_PLANE_NUM elements so the > should be >= or we are one element beyond the end of the array. Fixes:8b08cf2b64("OMAP: add TI OMAP framebuffer driver") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: Imre Deak <imre.deak@solidboot.com> Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com> Signed-off-by: Sasha Levin <alexander.levin@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
3340ab9770
commit
3bc6debeee
@@ -958,7 +958,7 @@ int omapfb_register_client(struct omapfb_notifier_block *omapfb_nb,
|
||||
{
|
||||
int r;
|
||||
|
||||
if ((unsigned)omapfb_nb->plane_idx > OMAPFB_PLANE_NUM)
|
||||
if ((unsigned)omapfb_nb->plane_idx >= OMAPFB_PLANE_NUM)
|
||||
return -EINVAL;
|
||||
|
||||
if (!notifier_inited) {
|
||||
|
||||
Reference in New Issue
Block a user