Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Jennifer Berringer 406c63ceea nvmem: core: improve range check for nvmem_cell_write() ... commit 31507fc2ad36e0071751a710449db19c85d82a7f upstream. When __nvmem_cell_entry_write() is called for an nvmem cell that does not need bit shifting, it requires that the len parameter exactly matches the nvmem cell size. However, when the nvmem cell has a nonzero bit_offset, it was skipping this check. Accepting values of len larger than the cell size results in nvmem_cell_prepare_write_buffer() trying to write past the end of a heap buffer that it allocates. Add a check to avoid that problem and instead return -EINVAL when len doesn't match the number of bits expected by the nvmem cell when bit_offset is nonzero. This check uses cell->nbits in order to allow providing the smaller size to cells that are shifted into another byte by bit_offset. For example, a cell with nbits=8 and nonzero bit_offset would have bytes=2 but should accept a 1-byte write here, although no current callers depend on this. Fixes: 69aba7948c ("nvmem: Add a simple NVMEM framework for consumers") Cc: stable@vger.kernel.org Signed-off-by: Jennifer Berringer <jberring@redhat.com> Signed-off-by: Srinivas Kandagatla <srinivas.kandagatla@linaro.org> Link: https://lore.kernel.org/r/20241230141901.263976-7-srinivas.kandagatla@linaro.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-03-13 12:43:10 +01:00
..
bcm-ocotp.c
core.c	nvmem: core: improve range check for nvmem_cell_write()	2025-03-13 12:43:10 +01:00
imx-iim.c
imx-ocotp-scu.c
imx-ocotp.c	nvmem: imx: correct nregs for i.MX6UL	2023-11-08 11:23:37 +01:00
Kconfig
lpc18xx_eeprom.c
lpc18xx_otp.c
Makefile
meson-efuse.c	nvmem: meson-efuse: Fix return value of nvmem callbacks	2024-07-18 11:40:55 +02:00
meson-mx-efuse.c
mtk-efuse.c
mxs-ocotp.c
nvmem-sysfs.c
nvmem.h
qfprom.c
rave-sp-eeprom.c
rockchip-efuse.c
sc27xx-efuse.c
snvs_lpgpr.c
stm32-romem.c
sunxi_sid.c
uniphier-efuse.c
vf610-ocotp.c
zynqmp_nvmem.c