]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c0964d6) | patch
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
authorAsmaa Mnebhi <asmaa@nvidia.com>
Thu, 8 Sep 2022 17:35:39 +0000 (13:35 -0400)
committerWolfram Sang <wsa@kernel.org>
Sat, 17 Sep 2022 18:13:57 +0000 (20:13 +0200)
commit41be2b71cf8c81fde030f091c37d052b47d7a802
treec5a1ef1b4fca0e7ca6a0a89ea7c67983bfe5f534tree | snapshot
parentc0964d64aa911a5361b3d9a43dc868f4a2e15f71commit | diff
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

memcpy() is called in a loop while 'operation->length' upper bound
is not checked and 'data_idx' also increments.

Fixes: 2fd238a293cc7ee4 ("i2c: mlxbf: I2C SMBus driver for Mellanox BlueField SoC")
Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com>
Signed-off-by: Asmaa Mnebhi <asmaa@nvidia.com>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
drivers/i2c/busses/i2c-mlxbf.c diff | blob | history
Linux Kernel Source Tree.