i2c: ismt: Return EMSGSIZE for block reads with bogus length
authorStephen Douthit <stephend@adiengineering.com>
Mon, 7 Aug 2017 21:11:00 +0000 (17:11 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 7 Sep 2017 06:35:39 +0000 (08:35 +0200)
commit91a0e1edb80a3cdeaa7b8810b65cc7abf6b85af8
tree2e7938dea2df6090faa17b2a794621f706f16db1
parentd22f6da47355b6547427838d67054c51bca0c011
i2c: ismt: Return EMSGSIZE for block reads with bogus length

commit ba201c4f5ebe13d7819081756378777d8153f23e upstream.

Compare the number of bytes actually seen on the wire to the byte
count field returned by the slave device.

Previously we just overwrote the byte count returned by the slave
with the real byte count and let the caller figure out if the
message was sane.

Signed-off-by: Stephen Douthit <stephend@adiengineering.com>
Tested-by: Dan Priamo <danp@adiengineering.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Signed-off-by: Wolfram Sang <wsa@the-dreams.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/i2c/busses/i2c-ismt.c