video: ipu: fix out of bounds access
authorPeng Fan <Peng.Fan@freescale.com>
Fri, 27 Nov 2015 02:00:10 +0000 (10:00 +0800)
committerAnatolij Gustschin <agust@denx.de>
Mon, 30 Nov 2015 08:18:36 +0000 (09:18 +0100)
commit3dbdb4dd4f8e5847b8f7d6dbd849e0b9a0907a5b
tree77281057a3c7fca791535702e432ec46c55b3df5
parent05bfe1321024e2ae0039dc16f17d2165610fb4fd
video: ipu: fix out of bounds access

We need to access reg stp_rep9, but not stp_rep[(9 - 1) / 2].
If using "__raw_writel(0, DI_STP_REP(disp, 9))", this will exceeds
the size of stp_rep array.

Signed-off-by: Peng Fan <Peng.Fan@freescale.com>
Acked-by: Liu Ying <Ying.Liu@freescale.com>
Cc: Stefano Babic <sbabic@denx.de>
Cc: Anatolij Gustschin <agust@denx.de>
drivers/video/ipu_disp.c
drivers/video/ipu_regs.h