WSL2-Linux-Kernel/drivers/i2c/busses
Wei Chen 92fbb6d129 i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
The data->block[0] variable comes from user and is a number between
0-255. Without proper check, the variable may be very large to cause
an out-of-bounds when performing memcpy in slimpro_i2c_blkwr.

Fix this bug by checking the value of writelen.

Fixes: f6505fbabc ("i2c: add SLIMpro I2C device driver on APM X-Gene platform")
Signed-off-by: Wei Chen <harperchen1110@gmail.com>
Cc: stable@vger.kernel.org
Reviewed-by: Andi Shyti <andi.shyti@kernel.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
2023-03-16 21:15:43 +01:00
..
Kconfig i2c: Disable I2C_APPLE when I2C_PASEMI is a builtin 2023-03-03 20:55:15 +01:00
Makefile i2c: Add GXP SoC I2C Controller 2023-02-17 23:18:20 +01:00
i2c-acorn.c
i2c-ali15x3.c
i2c-ali1535.c
i2c-ali1563.c
i2c-altera.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-amd-mp2-pci.c i2c: amd-mp2: use msix/msi if the hardware supports 2022-11-01 13:41:22 +01:00
i2c-amd-mp2-plat.c i2c: amd-mp2-plat: Refactor _UID handling to use acpi_dev_uid_to_integer() 2022-09-19 18:34:42 +02:00
i2c-amd-mp2.h i2c: amd-mp2: use msix/msi if the hardware supports 2022-11-01 13:41:22 +01:00
i2c-amd756-s4882.c
i2c-amd756.c
i2c-amd8111.c
i2c-aspeed.c i2c: aspeed: Use devm_platform_get_and_ioremap_resource() 2023-01-20 10:29:10 +01:00
i2c-at91-core.c
i2c-at91-master.c
i2c-at91-slave.c
i2c-at91.h
i2c-au1550.c i2c: au1550: Use devm_platform_get_and_ioremap_resource() 2023-01-20 10:32:55 +01:00
i2c-axxia.c i2c: axxia: use 'struct' for kernel-doc notation 2023-01-20 10:18:16 +01:00
i2c-bcm-iproc.c treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_30.RULE (part 2) 2022-06-10 14:51:35 +02:00
i2c-bcm-kona.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-bcm2835.c i2c: bcm2835: Use devm_platform_get_and_ioremap_resource() 2023-01-20 10:29:59 +01:00
i2c-brcmstb.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-cadence.c i2c: cadence: Remove redundant expression in if clause 2023-01-20 09:55:52 +01:00
i2c-cbus-gpio.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-ccgx-ucsi.c
i2c-ccgx-ucsi.h
i2c-cht-wc.c i2c: cht-wc: Add charger-chip info for the Lenovo Yoga Tab 3 YT3-X90F 2023-02-04 13:04:50 +00:00
i2c-cp2615.c
i2c-cpm.c
i2c-cros-ec-tunnel.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-davinci.c i2c: davinci: fix PM disable depth imbalance in davinci_i2c_probe 2022-10-02 00:46:42 +02:00
i2c-designware-amdpsp.c i2c: designware: Introduce semaphore reservation timer to AMDPSP driver 2022-08-20 08:29:04 +02:00
i2c-designware-baytrail.c
i2c-designware-common.c I2C for 6.3: 2023-02-24 17:12:23 -08:00
i2c-designware-core.h i2c: designware: Change from u32 to unsigned int for regmap_read() calls 2023-01-28 20:05:32 +01:00
i2c-designware-master.c i2c: designware: Change from u32 to unsigned int for regmap_read() calls 2023-01-28 20:05:32 +01:00
i2c-designware-pcidrv.c i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU 2023-01-09 16:24:13 +01:00
i2c-designware-platdrv.c i2c: designware: Fix unbalanced suspended flag 2023-01-09 13:11:17 +01:00
i2c-designware-slave.c i2c: designware: Change from u32 to unsigned int for regmap_read() calls 2023-01-28 20:05:32 +01:00
i2c-digicolor.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-diolan-u2c.c
i2c-dln2.c
i2c-eg20t.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-elektor.c
i2c-emev2.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-exynos5.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-fsi.c
i2c-gpio.c i2c: gpio: support write-only sda/scl w/o pull-up 2023-01-23 23:18:54 +01:00
i2c-gxp.c i2c: gxp: fix an error code in probe 2023-03-03 21:00:54 +01:00
i2c-highlander.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-hisi.c i2c: hisi: Only use the completion interrupt to finish the transfer 2023-03-16 21:02:15 +01:00
i2c-hix5hd2.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-hydra.c
i2c-i801.c i2c: i801: Call i801_check_post() from i801_access() 2023-02-17 22:12:00 +01:00
i2c-ibm_iic.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-ibm_iic.h
i2c-icy.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-img-scb.c
i2c-imx-lpi2c.c i2c: imx-lpi2c: check only for enabled interrupt flags 2023-03-16 20:35:57 +01:00
i2c-imx.c Core got a new helper 'i2c_client_get_device_id', designware got some 2022-12-15 14:47:10 -08:00
i2c-iop3xx.c
i2c-iop3xx.h
i2c-isch.c
i2c-ismt.c i2c: ismt: Fix an out-of-bounds bug in ismt_access() 2022-12-07 21:27:08 +01:00
i2c-jz4780.c
i2c-kempld.c i2c: kempld: Support ACPI I2C device declaration 2022-08-11 23:02:51 +02:00
i2c-lpc2k.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-ls2x.c i2c: ls2x: Add driver for Loongson-2K/LS7A I2C controller 2023-02-02 22:23:59 +01:00
i2c-mchp-pci1xxxx.c i2c: microchip: pci1xxxx: Fix comparison of -EPERM against an unsigned variable 2022-10-05 20:52:14 +02:00
i2c-meson.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-microchip-corei2c.c i2c: microchip-corei2c: fix erroneous late ack send 2022-08-11 14:28:56 +02:00
i2c-mlxbf.c i2c: mlxbf: depend on ACPI; clean away ifdeffage 2022-10-21 07:59:35 +02:00
i2c-mlxcpld.c i2c: fix spelling typos in comments 2022-10-20 23:09:10 +02:00
i2c-mpc.c powerpc/mpc5xxx: Switch mpc5xxx_get_bus_frequency() to use fwnode 2022-06-22 12:51:49 +10:00
i2c-mt65xx.c i2c: mt65xx: Use devm_platform_get_and_ioremap_resource() 2023-01-20 10:31:18 +01:00
i2c-mt7621.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-mv64xxx.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-mxs.c i2c: mxs: ensure that DMA buffers are safe for DMA 2023-03-16 20:47:32 +01:00
i2c-nforce2-s4985.c
i2c-nforce2.c
i2c-nomadik.c
i2c-npcm7xx.c Core got a new helper 'i2c_client_get_device_id', designware got some 2022-12-15 14:47:10 -08:00
i2c-nvidia-gpu.c i2c: nvidia-gpu: Remove ccgx,firmware-build property 2023-02-02 11:15:26 +01:00
i2c-ocores.c
i2c-octeon-core.c
i2c-octeon-core.h
i2c-octeon-platdrv.c
i2c-omap.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-opal.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-owl.c
i2c-parport.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-pasemi-core.c i2c: /pasemi: PASemi I2C controller IRQ enablement 2022-11-12 21:30:16 +01:00
i2c-pasemi-core.h i2c: /pasemi: PASemi I2C controller IRQ enablement 2022-11-12 21:30:16 +01:00
i2c-pasemi-pci.c
i2c-pasemi-platform.c i2c: /pasemi: PASemi I2C controller IRQ enablement 2022-11-12 21:30:16 +01:00
i2c-pca-isa.c
i2c-pca-platform.c
i2c-piix4.c i2c: piix4: Fix adapter not be removed in piix4_remove() 2022-11-01 13:09:33 +01:00
i2c-pnx.c
i2c-powermac.c
i2c-pxa-pci.c i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe 2022-12-05 11:00:34 +01:00
i2c-pxa.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-qcom-cci.c i2c: qcom-cci: Deprecate duplicated compatibles 2023-01-09 12:57:07 +01:00
i2c-qcom-geni.c I2C for 6.3: 2023-02-24 17:12:23 -08:00
i2c-qup.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-rcar.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-riic.c i2c: riic: Use devm_platform_ioremap_resource() 2022-09-17 20:35:34 +02:00
i2c-rk3x.c i2c: rk3x: fix a bunch of kernel-doc warnings 2023-01-20 10:18:51 +01:00
i2c-robotfuzz-osif.c
i2c-rzv2m.c i2c: Add Renesas RZ/V2M controller 2022-07-22 18:46:41 +02:00
i2c-s3c2410.c ARM: s3c: remove s3c24xx specific hacks 2023-01-16 09:26:05 +01:00
i2c-scmi.c i2c: scmi: Convert to be a platform driver 2022-09-16 20:44:08 +01:00
i2c-sh7760.c
i2c-sh_mobile.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-sibyte.c
i2c-simtec.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-sis96x.c
i2c-sis630.c i2c: fix spelling typos in comments 2022-10-20 23:09:10 +02:00
i2c-sis5595.c
i2c-sprd.c
i2c-st.c i2c: st: use pm_sleep_ptr to avoid ifdef CONFIG_PM_SLEEP 2023-02-12 22:06:49 +01:00
i2c-stm32.c
i2c-stm32.h
i2c-stm32f4.c
i2c-stm32f7.c i2c: stm32: add support for the STM32MP13 soc 2022-07-16 14:24:41 +02:00
i2c-sun6i-p2wi.c
i2c-synquacer.c
i2c-taos-evm.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-tegra-bpmp.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-tegra.c Core got a new helper 'i2c_client_get_device_id', designware got some 2022-12-15 14:47:10 -08:00
i2c-thunderx-pcidrv.c drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers 2022-05-21 13:41:28 +02:00
i2c-tiny-usb.c
i2c-uniphier-f.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-uniphier.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-versatile.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-via.c
i2c-viapro.c
i2c-viperboard.c
i2c-virtio.c
i2c-wmt.c i2c: move drivers from strlcpy to strscpy 2022-08-11 23:02:51 +02:00
i2c-xgene-slimpro.c i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() 2023-03-16 21:15:43 +01:00
i2c-xiic.c i2c: xiic: Remove some dead code 2023-02-17 22:46:10 +01:00
i2c-xlp9xx.c
scx200_acb.c