Messages in this thread | | | Date | Mon, 16 May 2011 13:26:03 +0100 | From | Liam Girdwood <> | Subject | Re: [PATCH] mfd: Fix off-by-one value range checking for tps65910_i2c_write |
| |
On 13/05/11 18:46, Samuel Ortiz wrote: > Hi Axel, > > On Fri, May 13, 2011 at 05:13:57PM +0800, Axel Lin wrote: >> If bytes == (TPS65910_MAX_REGISTER + 1), we have a buffer overflow when >> doing memcpy(&msg[1], src, bytes). > This code is going through Liam's tree, I'm adding him to this thread. > Liam, please add my Acked-by to this patch, if you think it's needed. >
Axel, could you resend to me with Samuels Ack and I'll apply.
Thanks
Liam
| |