diff options
| author | Jonathan Cameron <Jonathan.Cameron@huawei.com> | 2022-08-15 16:40:43 +0100 |
|---|---|---|
| committer | Dan Williams <dan.j.williams@intel.com> | 2022-10-20 16:28:53 -0700 |
| commit | cf00b33058b196b4db928419dde68993b15a975b (patch) | |
| tree | 7005b5d850a487619538ab15c2158161b2eee855 /drivers/cxl | |
| parent | 9abf2313adc1ca1b6180c508c25f22f9395cc780 (diff) | |
| download | linux-cf00b33058b196b4db928419dde68993b15a975b.tar.gz linux-cf00b33058b196b4db928419dde68993b15a975b.tar.bz2 linux-cf00b33058b196b4db928419dde68993b15a975b.zip | |
cxl/mbox: Add a check on input payload size
A bug in the LSA code resulted in transfers slightly larger
than the mailbox size. Let us make it easier to catch similar
issues in future by adding a low level check.
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Link: https://lore.kernel.org/r/20220815154044.24733-2-Jonathan.Cameron@huawei.com
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
Diffstat (limited to 'drivers/cxl')
| -rw-r--r-- | drivers/cxl/core/mbox.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/cxl/core/mbox.c b/drivers/cxl/core/mbox.c index 16176b9278b4..0c90f13870a4 100644 --- a/drivers/cxl/core/mbox.c +++ b/drivers/cxl/core/mbox.c @@ -174,7 +174,7 @@ int cxl_mbox_send_cmd(struct cxl_dev_state *cxlds, u16 opcode, void *in, }; int rc; - if (out_size > cxlds->payload_size) + if (in_size > cxlds->payload_size || out_size > cxlds->payload_size) return -E2BIG; rc = cxlds->mbox_send(cxlds, &mbox_cmd); |