Commit cfcd9f27 authored Sep 25, 2017 by Puja Gupta

sched: fair: Fix potential array out-of-bounds read in __find_new_capacity



To prevent reads past the size of the array, return the index of the
maximum capacity value in the capacity-states array if we can't find an
index with a capacity higher than the utilization passed in to
__find_new_capacity.

CRs-Fixed: 2115053
Change-Id: I20599134c9db4ae9fd298cab6197d2b4e866d3d8
Signed-off-by: Puja Gupta <pujag@codeaurora.org>

parent 2f80a4ec

kernel/sched/fair.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -5658,10 +5658,10 @@ static int __find_new_capacity(unsigned long util,

		for (idx = 0; idx < sge->nr_cap_states; idx++) {
		if (sge->cap_states[idx].cap >= util)
		break;
		return idx;
		}

		return idx;
		return (sge->nr_cap_states - 1);
		}

		static int find_new_capacity(struct energy_env *eenv,