On Tue, Sep 22, 2026 at 11:06:01AM +0000, Bill Wendling wrote: > Annotate the "configs" pointer field of "struct > tegra210_clk_emc_provider" with the "__counted_by_ptr" attribute, > allowing the compiler to perform runtime bounds checking on accesses to > "configs" based on the value of "num_configs". > > The "emc->provider.configs = devm_kcalloc(...)" call uses > "emc->num_timings" for the number of elements, which is then assigned to > "emc->provider.num_configs" before any accesses to "configs". The > "num_configs" field isn't modified after assignment.
Yup, that's the only assignment I can find. > Cc: [email protected] > Assisted-by: LLM > Signed-off-by: Bill Wendling <[email protected]> Reviewed-by: Kees Cook <[email protected]> -- Kees Cook
