Messages in this thread | | | Date | Mon, 4 Jul 2011 17:23:46 +0200 | From | Samuel Ortiz <> | Subject | Re: [PATCH] mfd: Fix off-by-one value range checking for tps65912_i2c_write |
| |
Hi Axel,
On Fri, Jun 24, 2011 at 10:37:57PM +0800, Axel Lin wrote: > From c5124060f13296bfc8cbbbb8298cf4b9b1faa1e9 Mon Sep 17 00:00:00 2001 > From: Axel Lin <axel.lin@gmail.com> > Date: Fri, 24 Jun 2011 15:34:16 +0800 > Subject: [PATCH] mfd: Fix off-by-one value range checking for tps65912_i2c_write > > If bytes == (TPS6591X_MAX_REGISTER + 1), we have a buffer overflow when > doing memcpy(&msg[1], src, bytes). Patch applied, thanks.
Cheers, Samuel.
-- Intel Open Source Technology Centre http://oss.intel.com/
| |