iio: accel: mma9551_core: prevent buffer overrun
authorIrina Tirdea <irina.tirdea@intel.com>
Mon, 13 Apr 2015 15:40:50 +0000 (18:40 +0300)
committerJonathan Cameron <jic23@kernel.org>
Sun, 26 Apr 2015 18:40:53 +0000 (19:40 +0100)
commit2a4d20322d1c619ae2f07378d5b360e85f562c98
treeef6f854ff2e9e79ad4c9e1c6399fe1e4f6f36db2
parentcd62322a9767f9a0bcf855123c478187e38a10f4
iio: accel: mma9551_core: prevent buffer overrun

The mma9551 functions that read/write word arrays from the
device have a limit for the buffer size given by the device
specifications.

Check that the requested buffer length is within required limits
when transferring word arrays. This will prevent buffer overrun
in the mma9551_read/write_*_words functions and also in the
mma9551_transfer call when writing into the MBOX response/request
structure.

Signed-off-by: Irina Tirdea <irina.tirdea@intel.com>
Reported-by: Hartmut Knaack <knaack.h@gmx.de>
Signed-off-by: Jonathan Cameron <jic23@kernel.org>
drivers/iio/accel/mma9551_core.c