spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
BugLink: https://bugs.launchpad.net/bugs/2085849 [ Upstream commit 5127c42c77de18651aa9e8e0a3ced190103b449c ] If the value of max_speed_hz is 0, it may cause a division by zero error in hisi_calc_effective_speed(). The value of max_speed_hz is provided by firmware. Firmware is generally considered as a trusted domain. However, as division by zero errors can cause system failure, for defense measure, the value of max_speed is validated here. So 0 is regarded as invalid and an error code is returned. Signed-off-by: Devyn Liu <liudingyuan@huawei.com> Reviewed-by: Jay Fang <f.fangjian@huawei.com> Link: https://patch.msgid.link/20240730032040.3156393-3-liudingyuan@huawei.com Signed-off-by: Mark Brown <broonie@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org> CVE-2024-47664 Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com> Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>
This commit is contained in:
committed by
Mehmet Basaran
parent
f505515d0f
commit
11b37d86a9
@@ -481,6 +481,9 @@ static int hisi_spi_probe(struct platform_device *pdev)
|
||||
return -EINVAL;
|
||||
}
|
||||
|
||||
if (host->max_speed_hz == 0)
|
||||
return dev_err_probe(dev, -EINVAL, "spi-max-frequency can't be 0\n");
|
||||
|
||||
ret = device_property_read_u16(dev, "num-cs",
|
||||
&host->num_chipselect);
|
||||
if (ret)
|
||||
|
||||
Reference in New Issue
Block a user