core: lpae: fix 'idx' boundary check in core_mmu_entry_to_finer_grain…

…ed() Table entry index, 'idx', was checked for [0, tbl_info->num_entries], while it should be [0, tbl_info->num_entries[. Signed-off-by: Izik Dubnov <[email protected]> Reviewed-by: Etienne Carriere <[email protected]> Reviewed-by: Jens Wiklander <[email protected]>
onken3000 · Sep 8, 2021 · 2ac1236 · 2ac1236
1 parent 39ef71a
commit 2ac1236
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/arch/arm/mm/core_mmu_lpae.c b/core/arch/arm/mm/core_mmu_lpae.c
@@ -740,7 +740,7 @@ bool core_mmu_entry_to_finer_grained(struct core_mmu_table_info *tbl_info,
 #endif
 	assert(prtn);
 
-	if (tbl_info->level >= 3 || idx > tbl_info->num_entries)
+	if (tbl_info->level >= 3 || idx >= tbl_info->num_entries)
 		return false;
 
 	entry = (uint64_t *)tbl_info->table + idx;