Re: [PATCH] mfd: Fix off-by-one value range checking for tps65910_i2c_write

From: Liam Girdwood
Date: Mon May 16 2011 - 08:26:15 EST


On 13/05/11 18:46, Samuel Ortiz wrote:
> Hi Axel,
>
> On Fri, May 13, 2011 at 05:13:57PM +0800, Axel Lin wrote:
>> If bytes == (TPS65910_MAX_REGISTER + 1), we have a buffer overflow when
>> doing memcpy(&msg[1], src, bytes).
> This code is going through Liam's tree, I'm adding him to this thread.
> Liam, please add my Acked-by to this patch, if you think it's needed.
>

Axel, could you resend to me with Samuels Ack and I'll apply.

Thanks

Liam
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/