1 matches found
kernel: regmap-irq: Fix out-of-bounds access when allocating config buffers
An off-by-one style bug exists in regmapaddirqchipfwnode where the allocation loop uses numconfigregs instead of numconfigbases as its termination condition. When numconfigregs exceeds numconfigbases, memory beyond the allocated row pointer array gets overwritten. KASAN caught this corruption...