]> git.baikalelectronics.ru Git - kernel.git/commit
platform/chrome: fix memory corruption in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 19 Aug 2022 05:20:36 +0000 (08:20 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 26 Oct 2022 11:22:28 +0000 (13:22 +0200)
commitbe787684b516c6cbe716499169ea4edb15fa8697
tree4f14ba3a304ff9c079e9f27498d0e43d1bf1793e
parent8312e6e3aa7322eef6dd69f7f4e54b35dbe1a826
platform/chrome: fix memory corruption in ioctl

[ Upstream commit 4963e118e3dd120c7acc14c19648290ff6ba9a55 ]

If "s_mem.bytes" is larger than the buffer size it leads to memory
corruption.

Fixes: 8c93ae858843 ("mfd / platform: cros_ec: Miscellaneous character device to talk with the EC")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Signed-off-by: Tzung-Bi Shih <tzungbi@kernel.org>
Link: https://lore.kernel.org/r/Yv8dpCFZJdbUT5ye@kili
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/platform/chrome/cros_ec_chardev.c