diff options
| author |  Dmitry Osipenko <digetx@gmail.com>
| 2020-08-31 23:43:35 +0300 |
|---|---|---|
| committer |  Mark Brown <broonie@kernel.org>
| 2020-09-01 13:26:28 +0100 |
| commit | 0a7416f94707c60b9f66b01c0a505b7e41375f3a (patch) | |
| tree | 6df5115827f260e3ee84a4d8e218df2435743361 /drivers/usb/isp1760 | |
| parent | Merge tag 'v5.9-rc2' into regulator-5.9 (diff) | |
| download | linux-0a7416f94707c60b9f66b01c0a505b7e41375f3a.tar.gz linux-0a7416f94707c60b9f66b01c0a505b7e41375f3a.tar.bz2 linux-0a7416f94707c60b9f66b01c0a505b7e41375f3a.zip | |
regulator: core: Fix slab-out-of-bounds in regulator_unlock_recursive()
The recent commit 7d8196641ee1 ("regulator: Remove pointer table
overallocation") changed the size of coupled_rdevs and now KASAN is able
to detect slab-out-of-bounds problem in regulator_unlock_recursive(),
which is a legit problem caused by a typo in the code. The recursive
unlock function uses n_coupled value of a parent regulator for unlocking
supply regulator, while supply's n_coupled should be used. In practice
problem may only affect platforms that use coupled regulators.
Cc: stable@vger.kernel.org # 5.0+
Fixes: f8702f9e4aa7 ("regulator: core: Use ww_mutex for regulators locking")
Signed-off-by: Dmitry Osipenko <digetx@gmail.com>
Link: https://lore.kernel.org/r/20200831204335.19489-1-digetx@gmail.com
Signed-off-by: Mark Brown <broonie@kernel.org>
Diffstat (limited to 'drivers/usb/isp1760')
0 files changed, 0 insertions, 0 deletions