summaryrefslogtreecommitdiff
path: root/drivers/iio
diff options
context:
space:
mode:
authorChenyuan Mi <michenyuan@huawei.com>2023-07-25 12:24:07 +0300
committerJonathan Cameron <Jonathan.Cameron@huawei.com>2023-07-29 17:59:20 +0300
commit49d736313d0975ddeb156f4f59801da833f78b30 (patch)
tree14fe4bad9cd8a98d7c024d91e872ec51c0e56e4f /drivers/iio
parent9afc8c6dc68f2f58c4ad7c7c72158e1a7bb5395e (diff)
downloadlinux-49d736313d0975ddeb156f4f59801da833f78b30.tar.xz
tools: iio: iio_generic_buffer: Fix some integer type and calculation
In function size_from_channelarray(), the return value 'bytes' is defined as int type. However, the calcution of 'bytes' in this function is designed to use the unsigned int type. So it is necessary to change 'bytes' type to unsigned int to avoid integer overflow. The size_from_channelarray() is called in main() function, its return value is directly multipled by 'buf_len' and then used as the malloc() parameter. The 'buf_len' is completely controllable by user, thus a multiplication overflow may occur here. This could allocate an unexpected small area. Signed-off-by: Chenyuan Mi <michenyuan@huawei.com> Link: https://lore.kernel.org/r/20230725092407.62545-1-michenyuan@huawei.com Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Diffstat (limited to 'drivers/iio')
0 files changed, 0 insertions, 0 deletions