android_kernel_motorola_sm6375/kernel/irq
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Ben Dai 0c8dea3fd5 genirq/timings: Prevent potential array overflow in __irq_timings_store()
commit b9cc7d8a4656a6e815852c27ab50365009cb69c1 upstream.

When the interrupt interval is greater than 2 ^ PREDICTION_BUFFER_SIZE *
PREDICTION_FACTOR us and less than 1s, the calculated index will be greater
than the length of irqs->ema_time[]. Check the calculated index before
using it to prevent array overflow.

Fixes: 23aa3b9a6b ("genirq/timings: Encapsulate storing function")
Signed-off-by: Ben Dai <ben.dai@unisoc.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20210425150903.25456-1-ben.dai9703@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-08-18 08:57:02 +02:00
..
affinity.c
autoprobe.c
chip.c genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP 2021-08-18 08:57:02 +02:00
cpuhotplug.c
debug.h
debugfs.c genirq/debugfs: Add missing sanity checks to interrupt injection 2020-04-17 10:50:11 +02:00
devres.c
dummychip.c
generic-chip.c
handle.c
internals.h genirq/proc: Reject invalid affinity masks (again) 2020-02-28 17:22:26 +01:00
ipi.c
irq_sim.c
irqdesc.c
irqdomain.c genirq/irqdomain: Don't try to free an interrupt that has no mapping 2020-12-30 11:51:14 +01:00
Kconfig genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY 2020-11-18 19:20:16 +01:00
Makefile
manage.c genirq: Disable interrupts for force threaded handlers 2021-03-24 11:26:45 +01:00
matrix.c genirq/matrix: Prevent allocation counter corruption 2021-05-11 14:04:05 +02:00
migration.c
msi.c genirq/msi: Ensure deactivation on teardown 2021-08-18 08:57:02 +02:00
pm.c genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq() 2020-08-21 13:05:20 +02:00
proc.c genirq/proc: Reject invalid affinity masks (again) 2020-02-28 17:22:26 +01:00
resend.c
settings.h
spurious.c
timings.c genirq/timings: Prevent potential array overflow in __irq_timings_store() 2021-08-18 08:57:02 +02:00