[PW_SID:972285] i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer#535
[PW_SID:972285] i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer#535linux-riscv-bot wants to merge 1 commit into
Conversation
The data->block[0] variable comes from user. Without proper check, the variable may be very large to cause an out-of-bounds bug. Fix this bug by checking the value of data->block[0] first. Similar commit: 1. commit 39244cc ("i2c: ismt: Fix an out-of-bounds bug in ismt_access()") 2. commit 92fbb6d ("i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()") Signed-off-by: Alex Guo <alexguo1023@gmail.com> Signed-off-by: Linux RISC-V bot <linux.riscv.bot@gmail.com>
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
|
Patch 1: "i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer" |
PR for series 972285 applied to workflow__riscv__fixes
Name: i2c: busses: Fix out-of-bounds bug in mchp_corei2c_smbus_xfer
URL: https://patchwork.kernel.org/project/linux-riscv/list/?series=972285
Version: 1