diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-07-20 19:54:23 +0800 |
|---|---|---|
| committer | Lee Jones <lee@kernel.org> | 2026-08-06 14:16:03 +0100 |
| commit | 08ea045e0b82cbcadb7a2efc43a23561489a00f2 (patch) | |
| tree | 0564fa263b119cc53def3bbf7b938012e575efce /scripts | |
| parent | 0be718b5451bd83865d6e2a8d750ca7886c4772a (diff) | |
| download | linux-08ea045e0b82cbcadb7a2efc43a23561489a00f2.tar.gz linux-08ea045e0b82cbcadb7a2efc43a23561489a00f2.zip | |
mfd: iqs62x: Reject zero-length firmware records
struct iqs62x_fw_rec includes the first data byte in its fixed-size header,
so the parser advances by len - 1 bytes after that header. A zero len makes
the size_t cursor update move back by one byte, so the next record overlaps
the current record instead of following a valid declared extent.
Reject zero-length records and express the remaining-size check without an
offset addition.
Fixes: 4d9cf7df8d35 ("mfd: Add support for Azoteq IQS620A/621/622/624/625")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://lore.kernel.org/all/20260706091034.75865-1-pengpeng@iscas.ac.cn/
Link: https://patch.msgid.link/20260720115423.94994-1-pengpeng@iscas.ac.cn
Signed-off-by: Lee Jones <lee@kernel.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions
