drm: off by one in drm_edid.c
m == num_est3_modes is one past the end of the est3_modes[]. Signed-off-by: Dan Carpenter <error27@gmail.com> Reviewed-by: Adam Jackson <ajax@redhat.com> Signed-off-by: Dave Airlie <airlied@redhat.com>
This commit is contained in:
Родитель
3b9676e7ac
Коммит
0ddfa7d574
|
@ -1383,7 +1383,7 @@ drm_est3_modes(struct drm_connector *connector, struct detailed_timing *timing)
|
|||
for (i = 0; i < 6; i++) {
|
||||
for (j = 7; j > 0; j--) {
|
||||
m = (i * 8) + (7 - j);
|
||||
if (m > num_est3_modes)
|
||||
if (m >= num_est3_modes)
|
||||
break;
|
||||
if (est[i] & (1 << j)) {
|
||||
mode = drm_find_dmt(connector->dev,
|
||||
|
|
Загрузка…
Ссылка в новой задаче