This is a note to let you know that I've just added the patch titled hwmon: (ads1015) Fix off-by-one for valid channel index checking to the 3.10-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: hwmon-ads1015-fix-off-by-one-for-valid-channel-index-checking.patch and it can be found in the queue-3.10 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 56de1377ad92f72ee4e5cb0faf7a9b6048fdf0bf Mon Sep 17 00:00:00 2001 From: Axel Lin <axel.lin@xxxxxxxxxx> Date: Wed, 30 Jul 2014 11:13:52 +0800 Subject: hwmon: (ads1015) Fix off-by-one for valid channel index checking From: Axel Lin <axel.lin@xxxxxxxxxx> commit 56de1377ad92f72ee4e5cb0faf7a9b6048fdf0bf upstream. Current code uses channel as array index, so the valid channel value is 0 .. ADS1015_CHANNELS - 1. Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx> Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/hwmon/ads1015.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/hwmon/ads1015.c +++ b/drivers/hwmon/ads1015.c @@ -184,7 +184,7 @@ static int ads1015_get_channels_config_o } channel = be32_to_cpup(property); - if (channel > ADS1015_CHANNELS) { + if (channel >= ADS1015_CHANNELS) { dev_err(&client->dev, "invalid channel index %d on %s\n", channel, node->full_name); Patches currently in stable-queue which might be from axel.lin@xxxxxxxxxx are queue-3.10/hwmon-sis5595-prevent-overflow-problem-when-writing-large-limits.patch queue-3.10/hwmon-ads1015-fix-off-by-one-for-valid-channel-index-checking.patch queue-3.10/hwmon-lm78-fix-overflow-problems-seen-when-writing-large-temperature-limits.patch queue-3.10/hwmon-gpio-fan-prevent-overflow-problem-when-writing-large-limits.patch queue-3.10/hwmon-ads1015-fix-out-of-bounds-array-access.patch queue-3.10/hwmon-dme1737-prevent-overflow-problem-when-writing-large-limits.patch queue-3.10/hwmon-lm85-fix-various-errors-on-attribute-writes.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html