diff options
| author | Asmaa Mnebhi <asmaa@nvidia.com> | 2022-09-08 13:35:39 -0400 |
|---|---|---|
| committer | Wolfram Sang <wsa@kernel.org> | 2022-09-17 20:13:57 +0200 |
| commit | de24aceb07d426b6f1c59f33889d6a964770547b (patch) | |
| tree | c5a1ef1b4fca0e7ca6a0a89ea7c67983bfe5f534 /drivers/usb/cdns3/cdns3-pci-wrap.c | |
| parent | 2a5be6d1340c0fefcee8a6489cff7fd88a0d5b85 (diff) | |
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
memcpy() is called in a loop while 'operation->length' upper bound
is not checked and 'data_idx' also increments.
Fixes: b5b5b32081cd206b ("i2c: mlxbf: I2C SMBus driver for Mellanox BlueField SoC")
Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com>
Signed-off-by: Asmaa Mnebhi <asmaa@nvidia.com>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
Diffstat (limited to 'drivers/usb/cdns3/cdns3-pci-wrap.c')
0 files changed, 0 insertions, 0 deletions