~hc/RK356X_SDK_RELEASE.git

summary
commits
tree
docs
forks
compare

blame | history | patch | commit | commitdiff

2024-05-14 bedbef8ad3e75a304af6361af235302bcc61d06b

 kernel/drivers/i2c/busses/i2c-ismt.c
.. .. @@ -507,6 +507,9 @@
507 507  		if (read_write == I2C_SMBUS_WRITE) {
508 508  			/* Block Write */
509 509  			dev_dbg(dev, "I2C_SMBUS_BLOCK_DATA:  WRITE\n");
510 +			if (data->block[0] < 1 || data->block[0] > I2C_SMBUS_BLOCK_MAX)
511 +				return -EINVAL;
512 +
510 513  			dma_size = data->block[0] + 1;
511 514  			dma_direction = DMA_TO_DEVICE;
512 515  			desc->wr_len_cmd = dma_size;

..	..	@@ -507,6 +507,9 @@
507	507	if (read_write == I2C_SMBUS_WRITE) {
508	508	/* Block Write */
509	509	dev_dbg(dev, "I2C_SMBUS_BLOCK_DATA: WRITE\n");
	510	+ if (data->block[0] < 1 \|\| data->block[0] > I2C_SMBUS_BLOCK_MAX)
	511	+ return -EINVAL;
	512	+
510	513	dma_size = data->block[0] + 1;
511	514	dma_direction = DMA_TO_DEVICE;
512	515	desc->wr_len_cmd = dma_size;