Unverified Commit 66ca7b64 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!6909 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liu Shixin <liushixin2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/LACXVZKIRAXN75KXSXUHXKY5XQPZDHNM/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9KHJ6 
 
Link:https://gitee.com/openeuler/kernel/pulls/6909

 

Reviewed-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 84913d9f 203aebd3

drivers/i2c/busses/i2c-mlxbf.c

+3 −0
Original line number Diff line number Diff line
@@ -744,6 +744,9 @@ mlxbf_i2c_smbus_start_transaction(struct mlxbf_i2c_priv *priv, 
		if (flags & MLXBF_I2C_F_WRITE) {

			write_en = 1;

			write_len += operation->length;

			if (data_idx + operation->length >

					MLXBF_I2C_MASTER_DATA_DESC_SIZE)

				return -ENOBUFS;

			memcpy(data_desc + data_idx,

			       operation->buffer, operation->length);

			data_idx += operation->length;