]> git.baikalelectronics.ru Git - kernel.git/commit
mfd: Fix off-by-one value range checking for tps65912_i2c_write
authorAxel Lin <axel.lin@gmail.com>
Fri, 24 Jun 2011 07:34:16 +0000 (15:34 +0800)
committerSamuel Ortiz <sameo@linux.intel.com>
Sun, 31 Jul 2011 21:28:25 +0000 (23:28 +0200)
commit2acdf1cf239f5ac157565ec379e39752df5d50d5
tree016d6f2ca080a9cd694a8b41ddca96273d8c4ac3
parent0681e0fd8d2153b38e9fdb5fb65aa0c4df5f6d7a
mfd: Fix off-by-one value range checking for tps65912_i2c_write

If bytes == (TPS6591X_MAX_REGISTER + 1), we have a buffer overflow when
doing memcpy(&msg[1], src, bytes).

Signed-off-by: Axel Lin <axel.lin@gmail.com>
Signed-off-by: Samuel Ortiz <sameo@linux.intel.com>
drivers/mfd/tps65912-i2c.c