Mans Rullgard 250b26bb88 i2c: core: check returned size of emulated smbus block read ... [ Upstream commit 40e0520059 ] If the i2c bus driver ignores the I2C_M_RECV_LEN flag (as some of them do), it is possible for an I2C_SMBUS_BLOCK_DATA read issued on some random device to return an arbitrary value in the first byte (and nothing else). When this happens, i2c_smbus_xfer_emulated() will happily write past the end of the supplied data buffer, thus causing Bad Things to happen. To prevent this, check the size before copying the data block and return an error if it is too large. Fixes: 209d27c3b1 ("i2c: Emulate SMBus block read over I2C") Signed-off-by: Mans Rullgard <mans@mansr.com> [wsa: use better errno] Signed-off-by: Wolfram Sang <wsa@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-06-30 23:17:13 -04:00
..
algos	i2c: algos: bit: make the error messages grepable	2018-08-30 23:11:42 +02:00
busses	i2c: fsi: Fix the port number field in status register	2020-06-30 23:17:13 -04:00
muxes	i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()'	2020-05-27 17:37:30 +02:00
i2c-boardinfo.c	i2c: i2c-boardinfo: fix memory leaks on devinfo	2017-11-27 19:14:29 +01:00
i2c-core-acpi.c	i2c: acpi: put device when verifying client fails	2020-03-18 07:14:25 +01:00
i2c-core-base.c	i2c: fix bus recovery stop mode timing	2020-01-14 20:06:58 +01:00
i2c-core-of.c	i2c: core: fix use after free in of_i2c_notify	2019-12-13 08:51:07 +01:00
i2c-core-slave.c	i2c: remove i2c_lock_adapter and use i2c_lock_bus directly	2018-07-13 00:09:37 +02:00
i2c-core-smbus.c	i2c: core: check returned size of emulated smbus block read	2020-06-30 23:17:13 -04:00
i2c-core.h	i2c: make i2c_check_addr_validity() static	2018-03-24 14:07:23 +01:00
i2c-dev.c	i2c: dev: Fix the race between the release of i2c_dev and cdev	2020-05-27 17:37:27 +02:00
i2c-mux.c	Merge branch 'i2c/for-4.19' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux	2018-08-21 17:40:46 -07:00
i2c-slave-eeprom.c
i2c-smbus.c	i2c: i2c-smbus: add of_i2c_setup_smbus_alert	2017-10-28 23:42:47 +02:00
i2c-stub.c	treewide: kzalloc() -> kcalloc()	2018-06-12 16:19:22 -07:00
Kconfig
Makefile	i2c: don't use any __deprecated handling anymore	2018-08-24 17:26:43 +02:00