[PATCH v2 4/7] aiodev: lm75: fix out-of-bounds write on 64-bit SoCs

Ahmad Fatoum a.fatoum at pengutronix.de
Wed Oct 7 05:50:55 EDT 2020


Probing the lm75 device driver on 64 bit systems invokes
undefined behavior, because of an errant cast. Fix this.

Signed-off-by: Ahmad Fatoum <a.fatoum at pengutronix.de>
---
 drivers/aiodev/lm75.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/drivers/aiodev/lm75.c b/drivers/aiodev/lm75.c
index 8186fd2c2b97..8e5948f46874 100644
--- a/drivers/aiodev/lm75.c
+++ b/drivers/aiodev/lm75.c
@@ -22,6 +22,7 @@
 #define LM75_SHUTDOWN 0x01
 
 enum lm75_type {		/* keep sorted in alphabetical order */
+	unknown,
 	adt75,
 	ds1775,
 	ds75,
@@ -109,9 +110,9 @@ static int lm75_probe(struct device_d *dev)
 	int new, ret;
 	enum lm75_type kind;
 
-	ret = dev_get_drvdata(dev, (const void **)&kind);
-	if (ret)
-		return ret;
+	kind = (enum lm75_type)device_get_match_data(dev);
+	if (kind == unknown)
+		return -ENODEV;
 
 	data = xzalloc(sizeof(*data));
 
-- 
2.28.0




More information about the barebox mailing list