Sergey Shtylyov b0dbe5f70e of: cpu: add check in __of_find_n_match_cpu_property() ...

[ Upstream commit 5901eda2ed ]

In __of_find_n_match_cpu_property(), checking the variable ac for 0 won't
prevent a possible overflow when multiplying it by sizeof(*cell). Besides,
of_read_number() (called in the *for* loop) can't return correct result if
that variable (which equals the #address-cells prop's value) exceeds 2, so
additionally checking for that seems logical...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Fixes: f3cea45a77 ("of: Fix iteration bug over CPU reg properties")
Signed-off-by: Sergey Shtylyov <s.shtylyov@auroraos.dev>
Link: https://patch.msgid.link/0c7bf7e9-887c-42d5-bcfb-0ba7fe1e70b6@auroraos.dev
Signed-off-by: Rob Herring (Arm) <robh@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-07-24 16:03:10 +02:00

..

unittest-data

…

address.c

…

base.c

…

cpu.c

of: cpu: add check in __of_find_n_match_cpu_property()

2026-07-24 16:03:10 +02:00

device.c

…

dynamic.c

Revert "treewide: Fix probing of devices in DT overlays"

2026-07-24 16:03:02 +02:00

fdt_address.c

…

fdt.c

…

irq.c

…

Kconfig

…

kexec.c

of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range()

2026-06-19 13:39:14 +02:00

kobj.c

…

Makefile

…

module.c

…

of_numa.c

…

of_private.h

…

of_reserved_mem.c

…

overlay.c

…

pdt.c

…

platform.c

Revert "treewide: Fix probing of devices in DT overlays"

2026-07-24 16:03:02 +02:00

property.c

…

resolver.c

…

unittest.c

of: unittest: fix use-after-free in testdrv_probe()

2026-05-17 17:13:27 +02:00