forked from ~ljy/RK356X_SDK_RELEASE

hc
2024-05-11 645e752c5a84baeb21015cdc85fc05b7d16312c8
kernel/drivers/i2c/busses/i2c-ismt.c
....@@ -507,6 +507,9 @@
507507 if (read_write == I2C_SMBUS_WRITE) {
508508 /* Block Write */
509509 dev_dbg(dev, "I2C_SMBUS_BLOCK_DATA: WRITE\n");
510
+ if (data->block[0] < 1 || data->block[0] > I2C_SMBUS_BLOCK_MAX)
511
+ return -EINVAL;
512
+
510513 dma_size = data->block[0] + 1;
511514 dma_direction = DMA_TO_DEVICE;
512515 desc->wr_len_cmd = dma_size;