mtd: rawnand: stm32_fmc2: fix a buffer overflow

The chip select defined in the device tree could only be 0 or 1.

Signed-off-by: Christophe Kerello <christophe.kerello@st.com>
Reviewed-by: Patrice Chotard <patrice.chotard@st.com>

diff --git a/drivers/mtd/nand/raw/stm32_fmc2_nand.c b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
index 3306bd8ac94a460e24e395cdc21d45cae5c08e8c..2929acf66dd2cd831d769cdb08795a4131998cf5 100644 (file)
--- a/drivers/mtd/nand/raw/stm32_fmc2_nand.c
+++ b/drivers/mtd/nand/raw/stm32_fmc2_nand.c
@@ -846,7 +846,7 @@ static int stm32_fmc2_parse_child(struct stm32_fmc2_nfc *fmc2,
        }
 
        for (i = 0; i < nand->ncs; i++) {
-               if (cs[i] > FMC2_MAX_CE) {
+               if (cs[i] >= FMC2_MAX_CE) {
                        pr_err("Invalid reg value: %d\n",
                               nand->cs_used[i]);
                        return -EINVAL;