Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Sat, 17 Sep 2022 20:14:35 +0200
From:   Wolfram Sang <wsa+renesas@sang-engineering.com>
To:     Asmaa Mnebhi <asmaa@nvidia.com>
Cc:     linux-i2c@vger.kernel.org, linux-kernel@vger.kernel.org,
        Khalil Blaiech <kblaiech@nvidia.com>
Subject: Re: [PATCH v3 4/9] i2c-mlxbf: prevent stack overflow in
 mlxbf_i2c_smbus_start_transaction()
Message-ID: <YyYOi5EoKSUKLt5l@shikoro>
Mail-Followup-To: Wolfram Sang <wsa+renesas@sang-engineering.com>,
        Asmaa Mnebhi <asmaa@nvidia.com>, linux-i2c@vger.kernel.org,
        linux-kernel@vger.kernel.org, Khalil Blaiech <kblaiech@nvidia.com>
References: <20220908173544.32615-1-asmaa@nvidia.com>
 <20220908173544.32615-5-asmaa@nvidia.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
        protocol="application/pgp-signature"; boundary="HbfR/25l1tz8oMFa"
Content-Disposition: inline
In-Reply-To: <20220908173544.32615-5-asmaa@nvidia.com>
Precedence: bulk


--HbfR/25l1tz8oMFa
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 08, 2022 at 01:35:39PM -0400, Asmaa Mnebhi wrote:
> memcpy() is called in a loop while 'operation->length' upper bound
> is not checked and 'data_idx' also increments.
>=20
> Fixes: b5b5b32081cd206b ("i2c: mlxbf: I2C SMBus driver for Mellanox BlueF=
ield SoC")
> Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com>
> Signed-off-by: Asmaa Mnebhi <asmaa@nvidia.com>

Fixed the prefix in $subject and applied to for-current, thanks!


--HbfR/25l1tz8oMFa
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=2yYg
-----END PGP SIGNATURE-----

--HbfR/25l1tz8oMFa--