From 7e1ba3ba5e99a0eb2ff02633b600685d5cdc15f0 Mon Sep 17 00:00:00 2001 From: Manikandan Mohan Date: Fri, 11 Sep 2020 14:53:56 -0700 Subject: [PATCH] cnss2: Update bus bandwidth device tree config read Fix out of bounds write during device tree bus bandwidth array copy. Change-Id: I5fa1be5beabdccc4d662c74018d8fa22c547697b Signed-off-by: Manikandan Mohan --- drivers/net/wireless/cnss2/main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/wireless/cnss2/main.c b/drivers/net/wireless/cnss2/main.c index d89cbb768a0d..059e8568936b 100644 --- a/drivers/net/wireless/cnss2/main.c +++ b/drivers/net/wireless/cnss2/main.c @@ -2263,7 +2263,7 @@ static int cnss_register_bus_scale(struct cnss_plat_data *plat_priv) } cfg_arr_size = plat_priv->icc.path_count * plat_priv->icc.bus_bw_cfg_count * CNSS_ICC_VOTE_MAX; - cfg_arr = kzalloc(cfg_arr_size, GFP_KERNEL); + cfg_arr = kcalloc(cfg_arr_size, sizeof(*cfg_arr), GFP_KERNEL); if (!cfg_arr) { cnss_pr_err("Failed to alloc cfg table mem\n"); ret = -ENOMEM;