27 Jul
2024
27 Jul
'24
5:55 a.m.
On Fri, Jul 26, 2024 at 04:10:40PM GMT, Krzysztof Kozlowski wrote:
Hi,
Incorrect mask of Soundwire ports - one bit too long/big - was passed.
Theoretically, too wide mask could cause an out of bounds read in sdw_get_slave_dpn_prop() in stream.c, however only in the case of buggy driver, e.g. adding incorrect number of ports via sdw_stream_add_slave().
Well, granted that sdw_stream_add_slave() crashes on RB3, we know that the driver is buggy.
Not adding Cc-stable because I don't think the issue can lead to real out-of-bounds read.
--
With best wishes
Dmitry