linux

mirror of https://github.com/raspberrypi/linux.git synced 2025-12-06 10:00:17 +00:00

Files

Wei Chen cc3c3ee6d0 i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()

commit 92fbb6d129 upstream.

The data->block[0] variable comes from user and is a number between
0-255. Without proper check, the variable may be very large to cause
an out-of-bounds when performing memcpy in slimpro_i2c_blkwr.

Fix this bug by checking the value of writelen.

Fixes: f6505fbabc ("i2c: add SLIMpro I2C device driver on APM X-Gene platform")
Signed-off-by: Wei Chen <harperchen1110@gmail.com>
Cc: stable@vger.kernel.org
Reviewed-by: Andi Shyti <andi.shyti@kernel.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-03-30 12:51:42 +02:00

algos

i2c: algo: bit: use new macro to specifiy capabilities

2021-01-22 09:59:21 +01:00

busses

i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()

2023-03-30 12:51:42 +02:00

muxes

i2c: mux: reg: check return value after calling platform_get_resource()

2022-12-07 21:19:32 +01:00

i2c-boardinfo.c

i2c: Remove support for dangling device properties