diff options
| author | Charles Keepax <ckeepax@opensource.cirrus.com> | 2026-05-08 16:48:04 +0300 |
|---|---|---|
| committer | Lee Jones <lee@kernel.org> | 2026-06-17 13:32:30 +0300 |
| commit | b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c (patch) | |
| tree | 443bde4777e9ff26a4b09b03ec924f90f7b76613 /include/linux | |
| parent | 1cd125db9343dde0c521562a02190088dde2bd29 (diff) | |
| download | linux-b6ef1a74b3ec254f87a6a3c554fe8f8083ebd37c.tar.xz | |
mfd: cs42l43: Sanity check firmware size
Currently the code checks if a firmware was received, however it does
not verify that the firmware size is larger than the firmware header. As
the firmware pointer is dereferenced as a pointer to the header
structure this could lead to an out of bounds memory access. Add the
missing check.
Fixes: ace6d1448138 ("mfd: cs42l43: Add support for cs42l43 core driver")
Signed-off-by: Charles Keepax <ckeepax@opensource.cirrus.com>
Link: https://patch.msgid.link/20260508134804.1787461-1-ckeepax@opensource.cirrus.com
Signed-off-by: Lee Jones <lee@kernel.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions