BugLink: https://bugs.launchpad.net/bugs/2039291
commit 8a4629055ef55177b5b63dab1ecce676bd8cccdd upstream.
The struct cros_ec_command contains several integer fields and a
trailing array. An allocation size neglecting the integer fields can
lead to buffer overrun.
Reviewed-by: Tzung-Bi Shih <tzungbi@kernel.org>
Signed-off-by: Yiyuan Guo <yguoaz@gmail.com>
Fixes:
|
||
---|---|---|
.. | ||
cros_ec_sensors | ||
hid-sensors | ||
ms_sensors | ||
ssp_sensors | ||
st_sensors | ||
Kconfig | ||
Makefile |