i2c: ismt: Return EMSGSIZE for block reads with bogus length
authorStephen Douthit <stephend@adiengineering.com>
Mon, 7 Aug 2017 21:11:00 +0000 (17:11 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 7 Sep 2017 06:32:19 +0000 (08:32 +0200)
commit25bd5a5750b98bbdc59b727c8759847e2d4d5fed
tree40b337a66c943ddd005f899e956004ab395e48a5
parent5b6cfd5b7318c4626c884286f5303eb0951151de
i2c: ismt: Return EMSGSIZE for block reads with bogus length

commit ba201c4f5ebe13d7819081756378777d8153f23e upstream.

Compare the number of bytes actually seen on the wire to the byte
count field returned by the slave device.

Previously we just overwrote the byte count returned by the slave
with the real byte count and let the caller figure out if the
message was sane.

Signed-off-by: Stephen Douthit <stephend@adiengineering.com>
Tested-by: Dan Priamo <danp@adiengineering.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/i2c/busses/i2c-ismt.c