Asmaa Mnebhi 48ee0a864d i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() ...

[ Upstream commit de24aceb07d426b6f1c59f33889d6a964770547b ]

memcpy() is called in a loop while 'operation->length' upper bound
is not checked and 'data_idx' also increments.

Fixes: b5b5b32081cd206b ("i2c: mlxbf: I2C SMBus driver for Mellanox BlueField SoC")
Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com>
Signed-off-by: Asmaa Mnebhi <asmaa@nvidia.com>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-09-28 11:10:40 +02:00

..

algos

i2c: algo: pca: Reapply i2c bus settings after reset

2020-09-09 10:22:40 +02:00

busses

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

2022-09-28 11:10:40 +02:00

muxes

i2c: mux-gpmux: Add of_node_put() when breaking out of loop

2022-08-21 15:15:49 +02:00

i2c-boardinfo.c

…

i2c-core-acpi.c

i2c: acpi: fix resource leak in reconfiguration device addition

2021-10-13 10:04:29 +02:00

i2c-core-base.c

i2c: Fix a potential use after free

2022-08-21 15:15:40 +02:00

i2c-core-of.c

i2c: use my kernel.org address from now on

2020-05-05 16:29:09 +02:00

i2c-core-slave.c

i2c: slave: add sanity check when unregistering

2020-07-28 18:37:17 +02:00

i2c-core-smbus.c

i2c: core: check returned size of emulated smbus block read

2020-06-26 10:18:35 +02:00

i2c-core.h

i2c: acpi: Remove dead code, i.e. i2c_acpi_match_device()

2020-08-25 09:22:09 +02:00

i2c-dev.c

i2c: validate user data in compat ioctl

2022-01-05 12:40:32 +01:00

i2c-mux.c

…

i2c-slave-eeprom.c

i2c: busses: Use fallthrough pseudo-keyword

2020-07-23 22:04:08 +02:00

i2c-slave-testunit.c

i2c: add slave testunit driver

2020-09-21 11:02:17 +02:00

i2c-smbus.c

i2c: smbus: add core function handling SMBus host-notify

2020-09-09 10:38:28 +02:00

i2c-stub.c

…

Kconfig

i2c: add slave testunit driver

2020-09-21 11:02:17 +02:00

Makefile

i2c: add slave testunit driver

2020-09-21 11:02:17 +02:00