From: Kyle Hendry Add check to make sure port number is in range before writing to dt_val array Signed-off-by: Kyle Hendry --- drivers/net/pcs/pcs-rzn1-miic.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/drivers/net/pcs/pcs-rzn1-miic.c b/drivers/net/pcs/pcs-rzn1-miic.c index c50b65d064fa..3ee40eb9d545 100644 --- a/drivers/net/pcs/pcs-rzn1-miic.c +++ b/drivers/net/pcs/pcs-rzn1-miic.c @@ -692,6 +692,12 @@ static int miic_parse_dt(struct miic *miic, u32 *mode_cfg) if (of_property_read_u32(conv, "reg", &port)) continue; + if (port < miic->of_data->miic_port_start || port > miic->of_data->miic_port_max) { + dev_err(miic->dev, "Port number out of range: %d\n", port); + kfree(dt_val); + return -EINVAL; + } + if (of_property_read_u32(conv, "renesas,miic-input", &conf)) continue; -- 2.43.0