Commit ac588dfa authored by Sven Peter's avatar Sven Peter Committed by Greg Kroah-Hartman
Browse files

usb: typec: tipd: Add an additional overflow check 



tps6598x_block_read already checks for the maximum length of the read
but tps6598x_block_write does not. Add the symmetric check there as
well.

Reviewed-by: default avatarHeikki Krogerus <heikki.krogerus@linux.intel.com>
Signed-off-by: default avatarSven Peter <sven@svenpeter.dev>
Link: https://lore.kernel.org/r/20210914140235.65955-2-sven@svenpeter.dev


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 718dccb4

drivers/usb/typec/tipd/core.c

+3 −0
Original line number Diff line number Diff line
@@ -139,6 +139,9 @@ static int tps6598x_block_write(struct tps6598x *tps, u8 reg, 
{

	u8 data[TPS_MAX_LEN + 1];



	if (len + 1 > sizeof(data))

		return -EINVAL;



	if (!tps->i2c_protocol)

		return regmap_raw_write(tps->regmap, reg, val, len);