Re: [PATCH] i2c: i801: Fix out-of-bounds bug in i801_block_transaction _byte_by_byte

[Jean Delvare]

Hi Alex,

On Sun, 15 Jun 2025 19:33:06 -0400, Alex Guo wrote:
> The data->block[0] variable comes from user. Without proper check,
> the variable may be very large to cause an out-of-bounds bug.
> 
> Fix this bug by checking the value of data->block[0] first.

The same check is already present in i801_smbus_block_transaction() and
i801_i2c_block_transaction(), which are the only 2 functions calling
i801_block_transaction_byte_by_byte(). So the out-of-bounds bug you
describe does not exist.

-- 
Jean Delvare
SUSE L3 Support