linux/drivers
Josh Poimboeuf 76e51db43f objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()
If speed_hz < AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the
entire amd_spi_freq array without breaking out early, causing 'i' to go
beyond the array bounds.

Fix that by stopping the loop when it gets to the last entry, so the low
speed_hz value gets clamped up to AMD_SPI_MIN_HZ.

Fixes the following warning with an UBSAN kernel:

  drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()

Fixes: 3fe26121dc ("spi: amd: Configure device speed")
Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org>
Signed-off-by: Ingo Molnar <mingo@kernel.org>
Acked-by: Mark Brown <broonie@kernel.org>
Cc: Raju Rangoju <Raju.Rangoju@amd.com>
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Link: https://lore.kernel.org/r/78fef0f2434f35be9095bcc9ffa23dd8cab667b9.1742852847.git.jpoimboe@kernel.org
Closes: https://lore.kernel.org/r/202503161828.RUk9EhWx-lkp@intel.com/
2025-03-25 23:00:03 +01:00
..
accel A sched fence reference leak fix, two fence fixes for v3d, two overflow 2025-03-21 10:41:51 +10:00
accessibility
acpi [ Merge note: this pull request depends on you having merged 2025-03-24 22:06:11 -07:00
amba
android binderfs: fix use-after-free in binder_devices 2025-02-20 15:20:11 +01:00
ata ata fix for 6.14-final 2025-03-19 07:31:43 -07:00
atm
auxdisplay auxdisplay for v6.14-1 2025-01-24 08:03:52 -08:00
base vfs-6.15-rc1.async.dir 2025-03-24 10:47:14 -07:00
bcma
block block-6.14-20250313 2025-03-14 11:22:05 -10:00
bluetooth Bluetooth: btusb: Configure altsetting for HCI_USER_CHANNEL 2025-03-07 12:43:27 -05:00
bus bus: simple-pm-bus: fix forced runtime PM use 2025-02-20 15:22:02 +01:00
cache
cdrom treewide: const qualify ctl_tables where applicable 2025-01-28 13:48:37 +01:00
cdx cdx: Fix possible UAF error in driver_override_show() 2025-02-20 15:19:07 +01:00
char Char/Misc/IIO driver fixes for 6.14-rc6 2025-03-09 09:07:54 -10:00
clk Samsung clock controller fixes for v6.14 2025-03-11 10:51:13 -07:00
clocksource irqchip/jcore-aic, clocksource/drivers/jcore: Fix jcore-pit interrupt request 2025-02-17 23:27:49 +01:00
comedi
connector
counter
cpufreq cpufreq: intel_pstate: Avoid SMP calls to get cpu-type 2025-02-27 13:34:52 +01:00
cpuidle tracing: Disable branch profiling in noinstr code 2025-03-22 09:49:26 +01:00
crypto crypto: ccp: Add external API interface for PSP module initialization 2025-02-14 18:39:19 -05:00
cxl cxl changes for v6.14 2025-01-29 11:23:22 -08:00
dax
dca
devfreq Update devfreq next for v6.14 2025-01-13 20:48:34 +01:00
dio
dma dmaengine fixes for v6.14 2025-03-02 10:08:45 -08:00
dma-buf
dpll dpll: fix xa_alloc_cyclic() error handling 2025-03-19 09:57:37 +00:00
edac EDAC/qcom: Correct interrupt enable register configuration 2025-02-14 20:36:11 +01:00
eisa
extcon Update extcon next for v6.14 2025-01-12 13:44:27 +01:00
firewire Driver core and debugfs updates 2025-01-28 12:25:12 -08:00
firmware EFI fixes for v6.14 #3 2025-03-20 09:18:38 -07:00
fpga FPGA Manager changes for 6.14-rc1 2025-01-09 10:56:57 +01:00
fsi
gnss
gpio gpio: cdev: use raw notifier for line state events 2025-03-13 09:20:12 +01:00
gpu amd-drm-fixes-6.14-2025-03-20: 2025-03-21 11:59:49 +10:00
greybus
hid hid-for-linus-2025030501 2025-03-05 07:46:59 -10:00
hsi
hte
hv Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() 2025-03-10 16:54:06 +00:00
hwmon hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} 2025-03-17 04:44:20 -07:00
hwspinlock
hwtracing intel_th: pci: Add Panther Lake-P/U support 2025-02-20 09:35:57 +01:00
i2c i2c: amd-mp2: drop free_irq() of devm_request_irq() allocated irq 2025-03-20 14:37:47 +01:00
i3c I3C for 6.14 2025-01-24 15:48:01 -08:00
idle [ Merge note: this pull request depends on you having merged 2025-03-24 22:06:11 -07:00
iio iio: filter: admv8818: Force initialization of SDO 2025-02-08 12:46:32 +00:00
infiniband RDMA/hns: Fix wrong value of max_sge_rd 2025-03-12 14:35:50 -04:00
input Input updates for v6.14-rc6 2025-03-15 15:46:29 -10:00
interconnect interconnect changes for 6.14 2025-01-16 14:01:40 +01:00
iommu iommu/vt-d: Fix suspicious RCU usage 2025-02-28 12:19:01 +01:00
ipack
irqchip irqchip/qcom-pdc: Workaround hardware register bug on X1E80100 2025-02-21 09:47:06 +01:00
isdn
leds leds: leds-st1202: Fix NULL pointer access on race condition 2025-02-28 09:18:37 +00:00
macintosh The various patchsets are summarized below. Plus of course many 2025-01-26 18:36:23 -08:00
mailbox mailbox: th1520: Fix memory corruption due to incorrect array size 2025-01-18 16:20:55 -06:00
mcb
md - dm-flakey: fix memory corruption in optional corrupt_bio_byte feature 2025-03-14 11:31:57 -10:00
media media: rtl2832_sdr: assign vb2 lock before vb2_queue_init 2025-03-12 16:43:51 +01:00
memory memory: omap-gpmc: drop no compatible check 2025-03-14 17:59:17 +01:00
memstick Char/Misc/IIO driver updates for 6.14-rc1 2025-01-27 16:51:51 -08:00
message scsi: mptfusion: Mark device strings as nonstring 2025-02-28 11:51:31 -08:00
mfd mfd: syscon: Restore device_node_to_regmap() for non-syscon nodes 2025-02-11 14:53:39 +00:00
misc Linux 6.14-rc7 2025-03-19 11:03:06 +01:00
mmc mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops 2025-03-17 11:42:42 +01:00
most
mtd Fix writes on SST flashes 2025-02-19 14:38:47 +01:00
mux mux: constify mux class 2025-01-10 10:15:04 +01:00
net bitmap changes for 6.15 2025-03-24 19:11:58 -07:00
nfc nfc: mrvl: Don't use "proxy" headers 2025-01-18 17:10:05 -08:00
ntb PCI: Remove devres from pci_intx() 2025-01-18 14:38:49 -06:00
nubus
nvdimm driver core: Constify API device_find_child() and adapt for various usages 2025-01-03 11:19:35 +01:00
nvme nvme fixes for Linux 6.14 2025-03-13 09:41:57 -06:00
nvmem nvmem: core: improve range check for nvmem_cell_write() 2025-01-10 16:16:48 +01:00
of Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" 2025-02-26 13:39:28 -06:00
opp Driver core and debugfs updates 2025-01-28 12:25:12 -08:00
parisc
parport
pci [ Merge note: this pull request depends on you having merged 2025-03-24 22:06:11 -07:00
pcmcia
peci
perf treewide: const qualify ctl_tables where applicable 2025-01-28 13:48:37 +01:00
phy phy: tegra: xusb: reset VBUS & ID OVERRIDE 2025-02-14 18:03:05 +05:30
pinctrl pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally 2025-03-18 14:11:46 +01:00
platform x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE 2025-03-19 11:18:05 +01:00
pmdomain pmdomain: amlogic: fix T7 ISP secpower 2025-03-05 15:51:04 +01:00
pnp
power power: supply: axp20x_battery: Fix fault handling for AXP717 2025-02-03 12:41:18 +01:00
powercap Merge branch 'x86/mm' into x86/cpu, to avoid conflicts 2025-02-27 11:17:37 +01:00
pps pps: clients: gpio: Bypass edge's direction check when not needed 2025-01-10 16:12:33 +01:00
ps3
ptp ptp: vmclock: Remove goto-based cleanup logic 2025-02-11 10:20:52 +01:00
pwm Driver core and debugfs updates 2025-01-28 12:25:12 -08:00
rapidio rapidio: add check for rio_add_net() in rio_scan_alloc_net() 2025-03-05 21:36:19 -08:00
ras x86/amd_nb: Move SMN access code to a new amd_node driver 2025-01-08 10:59:44 +01:00
regulator regulator: rtq2208: Fix the LDO DVS capability 2025-03-17 12:45:37 +00:00
remoteproc remoteproc: st: Use syscon_regmap_lookup_by_phandle_args 2025-01-15 10:04:27 -07:00
reset reset: mchp: sparx5: Fix for lan966x 2025-03-13 09:40:26 +01:00
rpmsg driver core: Constify API device_find_child() and adapt for various usages 2025-01-03 11:19:35 +01:00
rtc RTC for 6.13 2025-01-30 17:50:02 -08:00
s390 Smaller than usual with no fixes from any subtree. 2025-02-20 10:19:54 -08:00
sbus
scsi bitmap changes for 6.15 2025-03-24 19:11:58 -07:00
sh
siox
slimbus slimbus: messaging: Free transaction ID in delayed interrupt scenario 2025-02-20 15:19:51 +01:00
soc soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly 2025-03-14 18:03:55 +01:00
soundwire soundwire updates for 6.14 2025-01-29 14:38:19 -08:00
spi objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() 2025-03-25 23:00:03 +01:00
spmi spmi: hisi-spmi-controller: Drop duplicated OF node assignment in spmi_controller_probe() 2025-01-17 12:58:49 +01:00
ssb
staging [ Merge note: this pull request depends on you having merged 2025-03-24 22:06:11 -07:00
target Merge branch '6.14/scsi-queue' into 6.14/scsi-fixes 2025-02-03 16:28:51 -05:00
tc
tee tee: optee: Fix supplicant wait loop 2025-02-14 15:17:34 +01:00
thermal Merge branch 'x86/urgent' into x86/cpu, to pick up dependent commits 2025-03-04 11:15:26 +01:00
thunderbolt thunderbolt: Prevent use-after-free in resume from hibernate 2025-03-07 14:00:58 +02:00
tty Serial driver fixes for 6.14-rc3 2025-02-16 12:50:44 -08:00
ufs scsi: ufs: core: bsg: Fix crash when arpmb command fails 2025-02-20 22:18:24 -05:00
uio Char/Misc/IIO driver updates for 6.14-rc1 2025-01-27 16:51:51 -08:00
usb usb: typec: tcpm: fix state transition for SNK_WAIT_CAPABILITIES state in run_state_machine() 2025-03-14 09:15:20 +01:00
vdpa virtio: features, fixes, cleanups 2025-01-27 15:26:06 -08:00
vfio make use of anon_inode_getfile_fmode() 2025-02-21 10:25:31 +01:00
vhost vhost: return task creation error instead of NULL 2025-03-01 02:52:52 -05:00
video fbdev: hyperv_fb: Allow graceful removal of framebuffer 2025-03-09 23:56:29 +00:00
virt Linux 6.14-rc7 2025-03-19 11:03:06 +01:00
virtio virtio: features, fixes, cleanups 2025-01-27 15:26:06 -08:00
w1 1-Wire bus drivers for v6.14 2025-01-09 10:54:19 +01:00
watchdog linux-watchdog 6.14-rc1 tag 2025-01-25 16:19:10 -08:00
xen xen: branch for v6.14-rc3 2025-02-14 08:15:17 -08:00
zorro zorro: Constify 'struct bin_attribute' 2025-01-08 18:04:36 +01:00
Kconfig
Makefile