Re: [PATCH] mfd: Fix off-by-one value range checking fortps65912_i2c_write

From: Samuel Ortiz
Date: Mon Jul 04 2011 - 11:23:22 EST


Hi Axel,

On Fri, Jun 24, 2011 at 10:37:57PM +0800, Axel Lin wrote:
> From c5124060f13296bfc8cbbbb8298cf4b9b1faa1e9 Mon Sep 17 00:00:00 2001
> From: Axel Lin <axel.lin@xxxxxxxxx>
> Date: Fri, 24 Jun 2011 15:34:16 +0800
> Subject: [PATCH] mfd: Fix off-by-one value range checking for tps65912_i2c_write
>
> If bytes == (TPS6591X_MAX_REGISTER + 1), we have a buffer overflow when
> doing memcpy(&msg[1], src, bytes).
Patch applied, thanks.

Cheers,
Samuel.

--
Intel Open Source Technology Centre
http://oss.intel.com/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/