Dan Carpenter 690b2549b1 i2c: ismt: prevent memory corruption in ismt_access() ... The "data->block[0]" variable comes from the user and is a number between 0-255. It needs to be capped to prevent writing beyond the end of dma_buffer[]. Fixes: 5e9a97b1f4 ("i2c: ismt: Adding support for I2C_SMBUS_BLOCK_PROC_CALL") Reported-and-tested-by: Zheyu Ma <zheyuma97@gmail.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2022-06-02 08:40:56 -07:00
..
algos	i2c: algo: bit: use new macro to specifiy capabilities	2021-01-22 09:59:21 +01:00
busses	i2c: ismt: prevent memory corruption in ismt_access()	2022-06-02 08:40:56 -07:00
muxes	i2c: mux: demux-pinctrl: do not deactivate a master that is not active	2022-03-20 00:49:43 +01:00
i2c-boardinfo.c	i2c: Remove support for dangling device properties	2021-04-10 21:43:02 +02:00
i2c-core-acpi.c	i2c: ACPI: Replace acpi_bus_get_device()	2022-02-07 17:00:08 +01:00
i2c-core-base.c	i2c: core: Use generic_handle_irq_safe() in i2c_handle_smbus_host_notify().	2022-03-01 15:58:41 +01:00
i2c-core-of.c
i2c-core-slave.c	i2c: add tracepoints for I2C slave events	2022-03-20 00:11:05 +01:00
i2c-core-smbus.c	i2c: smbus: Check for parent device before dereference	2022-02-19 12:37:20 +01:00
i2c-core.h	i2c: don't expose function which is only used internally	2022-02-15 09:58:57 +01:00
i2c-dev.c	i2c: dev: Force case user pointers in compat_i2cdev_ioctl()	2022-04-15 23:30:59 +02:00
i2c-mux.c
i2c-slave-eeprom.c	i2c: busses: Use fallthrough pseudo-keyword	2020-07-23 22:04:08 +02:00
i2c-slave-testunit.c	i2c: testunit: add support for block process calls	2021-02-12 11:11:04 +01:00
i2c-smbus.c	i2c: smbus: Use device_*() functions instead of of_*()	2022-01-28 21:56:34 +01:00
i2c-stub.c	i2c: stub: remove definition of DEBUG	2021-01-17 13:00:10 +01:00
Kconfig	i2c: add slave testunit driver	2020-09-21 11:02:17 +02:00
Makefile	i2c: add slave testunit driver	2020-09-21 11:02:17 +02:00