Dan Carpenter fc2f9ee756 i2c: ismt: prevent memory corruption in ismt_access() ... commit 690b2549b1 upstream. The "data->block[0]" variable comes from the user and is a number between 0-255. It needs to be capped to prevent writing beyond the end of dma_buffer[]. Fixes: 5e9a97b1f4 ("i2c: ismt: Adding support for I2C_SMBUS_BLOCK_PROC_CALL") Reported-and-tested-by: Zheyu Ma <zheyuma97@gmail.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-06-06 08:47:50 +02:00
..
algos	i2c: algo: bit: use new macro to specifiy capabilities	2021-01-22 09:59:21 +01:00
busses	i2c: ismt: prevent memory corruption in ismt_access()	2022-06-06 08:47:50 +02:00
muxes	i2c: mux: demux-pinctrl: do not deactivate a master that is not active	2022-04-08 13:58:21 +02:00
i2c-boardinfo.c	i2c: Remove support for dangling device properties	2021-04-10 21:43:02 +02:00
i2c-core-acpi.c	ACPI updates for 5.17-rc1	2022-01-10 20:26:56 -08:00
i2c-core-base.c	Merge branch 'i2c/for-mergewindow' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux	2022-01-14 16:19:38 +01:00
i2c-core-of.c
i2c-core-slave.c	i2c: slave: add sanity check when unregistering	2020-07-28 18:37:17 +02:00
i2c-core-smbus.c	i2c: core-smbus: Expose PEC calculate function for generic use	2021-06-25 17:09:34 +02:00
i2c-core.h	i2c: acpi: Remove dead code, i.e. i2c_acpi_match_device()	2020-08-25 09:22:09 +02:00
i2c-dev.c	i2c: dev: check return value when calling dev_set_name()	2022-04-20 09:36:27 +02:00
i2c-mux.c
i2c-slave-eeprom.c	i2c: busses: Use fallthrough pseudo-keyword	2020-07-23 22:04:08 +02:00
i2c-slave-testunit.c	i2c: testunit: add support for block process calls	2021-02-12 11:11:04 +01:00
i2c-smbus.c	i2c: smbus: add core function handling SMBus host-notify	2020-09-09 10:38:28 +02:00
i2c-stub.c	i2c: stub: remove definition of DEBUG	2021-01-17 13:00:10 +01:00
Kconfig	i2c: add slave testunit driver	2020-09-21 11:02:17 +02:00
Makefile	i2c: add slave testunit driver	2020-09-21 11:02:17 +02:00