Messages in this thread | | | Date | Tue, 19 Oct 2010 12:19:23 +0200 | From | Samuel Ortiz <> | Subject | Re: [PATCH] mfd: tps6507x - fix off-by-one value range checking |
| |
Hi Axel,
On Wed, Oct 13, 2010 at 10:44:39AM +0800, Axel Lin wrote: > We use msg[0] for device register. > If bytes == (TPS6507X_MAX_REGISTER + 1), > we got a buffer overflow when doing memcpy(&msg[1], src, bytes); > Thus we must ensure bytes not greater than TPS6507X_MAX_REGISTER. Thanks, patch applied to my for-next tree.
Cheers, Samuel.
-- Intel Open Source Technology Centre http://oss.intel.com/
| |