Wei Chen 92fbb6d129 i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() ... The data->block[0] variable comes from user and is a number between 0-255. Without proper check, the variable may be very large to cause an out-of-bounds when performing memcpy in slimpro_i2c_blkwr. Fix this bug by checking the value of writelen. Fixes: f6505fbabc ("i2c: add SLIMpro I2C device driver on APM X-Gene platform") Signed-off-by: Wei Chen <harperchen1110@gmail.com> Cc: stable@vger.kernel.org Reviewed-by: Andi Shyti <andi.shyti@kernel.org> Signed-off-by: Wolfram Sang <wsa@kernel.org>		2023-03-16 21:15:43 +01:00
..
algos	i2c: algo: bit: allow getsda to be NULL	2023-01-23 23:15:49 +01:00
busses	i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()	2023-03-16 21:15:43 +01:00
muxes	i2c: mux: Convert all drivers to new .probe() callback	2023-03-09 21:59:18 +01:00
i2c-boardinfo.c	i2c: Remove support for dangling device properties	2021-04-10 21:43:02 +02:00
i2c-core-acpi.c	i2c: add fwnode APIs	2023-01-17 09:29:59 +01:00
i2c-core-base.c	i2c: Convert drivers to new .probe() callback	2023-03-09 21:59:30 +01:00
i2c-core-of.c	i2c: add fwnode APIs	2023-01-17 09:29:59 +01:00
i2c-core-slave.c	i2c: add tracepoints for I2C slave events	2022-03-20 00:11:05 +01:00
i2c-core-smbus.c	i2c: smbus: Check for parent device before dereference	2022-02-19 12:37:20 +01:00
i2c-core.h	i2c: acpi: Use ACPI wake capability bit to set wake_irq	2022-10-04 15:41:12 +02:00
i2c-dev.c	i2c: dev: Fix bus callback return values	2023-03-09 22:07:52 +01:00
i2c-mux.c	i2c: mux: harden i2c_mux_alloc() against integer overflows	2022-09-21 22:12:06 +02:00
i2c-slave-eeprom.c	i2c: Convert drivers to new .probe() callback	2023-03-09 21:59:30 +01:00
i2c-slave-testunit.c	i2c: Convert drivers to new .probe() callback	2023-03-09 21:59:30 +01:00
i2c-smbus.c	i2c: Convert drivers to new .probe() callback	2023-03-09 21:59:30 +01:00
i2c-stub.c	i2c: stub: remove definition of DEBUG	2021-01-17 13:00:10 +01:00
Kconfig
Makefile