summaryrefslogtreecommitdiffstats
path: root/drivers/media/cec/platform
diff options
context:
space:
mode:
authorHans Verkuil <hverkuil-cisco@xs4all.nl>2022-08-24 09:06:19 +0200
committerMauro Carvalho Chehab <mchehab@kernel.org>2022-09-24 08:46:16 +0200
commit2dc73b48665411a08c4e5f0f823dea8510761603 (patch)
tree86bc5771f031897b9991301f475258808e7464b4 /drivers/media/cec/platform
parentmedia: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (diff)
downloadlinux-2dc73b48665411a08c4e5f0f823dea8510761603.tar.xz
linux-2dc73b48665411a08c4e5f0f823dea8510761603.zip
media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case. Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org>
Diffstat (limited to 'drivers/media/cec/platform')
-rw-r--r--drivers/media/cec/platform/cros-ec/cros-ec-cec.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/media/cec/platform/cros-ec/cros-ec-cec.c b/drivers/media/cec/platform/cros-ec/cros-ec-cec.c
index 3b583ed4da9d..e5ebaa58be45 100644
--- a/drivers/media/cec/platform/cros-ec/cros-ec-cec.c
+++ b/drivers/media/cec/platform/cros-ec/cros-ec-cec.c
@@ -44,6 +44,8 @@ static void handle_cec_message(struct cros_ec_cec *cros_ec_cec)
uint8_t *cec_message = cros_ec->event_data.data.cec_message;
unsigned int len = cros_ec->event_size;
+ if (len > CEC_MAX_MSG_SIZE)
+ len = CEC_MAX_MSG_SIZE;
cros_ec_cec->rx_msg.len = len;
memcpy(cros_ec_cec->rx_msg.msg, cec_message, len);