Re: [PATCH] mfd: Fix off-by-one value range checking fortps65910_i2c_write

From: Samuel Ortiz
Date: Fri May 13 2011 - 13:46:15 EST


Hi Axel,

On Fri, May 13, 2011 at 05:13:57PM +0800, Axel Lin wrote:
> If bytes == (TPS65910_MAX_REGISTER + 1), we have a buffer overflow when
> doing memcpy(&msg[1], src, bytes).
This code is going through Liam's tree, I'm adding him to this thread.
Liam, please add my Acked-by to this patch, if you think it's needed.

Cheers,
Samuel.

--
Intel Open Source Technology Centre
http://oss.intel.com/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/