diff options
| author | Asmaa Mnebhi <asmaa@nvidia.com> | 2022-09-08 19:35:39 +0200 |
|---|---|---|
| committer | Wolfram Sang <wsa@kernel.org> | 2022-09-17 20:13:57 +0200 |
| commit | de24aceb07d426b6f1c59f33889d6a964770547b (patch) | |
| tree | c5a1ef1b4fca0e7ca6a0a89ea7c67983bfe5f534 /drivers/i2c/i2c-mux.c | |
| parent | i2c: mlxbf: incorrect base address passed during io write (diff) | |
| download | linux-de24aceb07d426b6f1c59f33889d6a964770547b.tar.xz linux-de24aceb07d426b6f1c59f33889d6a964770547b.zip | |
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while 'operation->length' upper bound
is not checked and 'data_idx' also increments.
Fixes: b5b5b32081cd206b ("i2c: mlxbf: I2C SMBus driver for Mellanox BlueField SoC")
Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com>
Signed-off-by: Asmaa Mnebhi <asmaa@nvidia.com>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
Diffstat (limited to 'drivers/i2c/i2c-mux.c')
0 files changed, 0 insertions, 0 deletions