i2c: dev: copy userspace array safely
authorPhilipp Stanner <pstanner@redhat.com>
Thu, 2 Nov 2023 19:26:13 +0000 (20:26 +0100)
committerWolfram Sang <wsa@kernel.org>
Wed, 8 Nov 2023 09:26:27 +0000 (10:26 +0100)
commitcc9c54232f04aef3a5d7f64a0ece7df00f1aaa3d
treeed5160827e15e024e4eaa8c527c325992f56cbc9
parente8183fa10c25c7b3c20670bf2b430ddcc1ee03c0
i2c: dev: copy userspace array safely

i2c-dev.c utilizes memdup_user() to copy a userspace array. This is done
without an overflow check.

Use the new wrapper memdup_array_user() to copy the array more safely.

Suggested-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Philipp Stanner <pstanner@redhat.com>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
drivers/i2c/i2c-dev.c