diff options
| author | Deepak Sharma <deepak.sharma.472935@gmail.com> | 2025-09-26 20:28:11 +0530 |
|---|---|---|
| committer | Jiri Kosina <jkosina@suse.com> | 2025-10-14 11:46:49 +0200 |
| commit | 362f21536966d7039da1de762f28f4ad44565acc (patch) | |
| tree | e0e2767018b5beec65ed4d34042d86467f92c8cd /scripts/lib/kdoc/kdoc_parser.py | |
| parent | 50f1f782f8d621a90108340c632bcb6ab4307d2e (diff) | |
HID: cp2112: Add parameter validation to data length
Syzkaller reported a stack OOB access in cp2112_write_req caused by lack
of parameter validation for the user input in I2C SMBUS ioctl in cp2112
driver
Add the parameter validation for the data->block[0] to be bounded by
I2C_SMBUS_BLOCK_MAX + the additional compatibility padding
[jkosina@suse.com: fix whitespace damage]
Reported-by: syzbot+7617e19c8a59edfbd879@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=7617e19c8a59edfbd879
Tested-by: syzbot+7617e19c8a59edfbd879@syzkaller.appspotmail.com
Signed-off-by: Deepak Sharma <deepak.sharma.472935@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
Diffstat (limited to 'scripts/lib/kdoc/kdoc_parser.py')
0 files changed, 0 insertions, 0 deletions