diff options
| author | Corey Minyard <cminyard@mvista.com> | 2019-01-28 11:48:19 -0600 |
|---|---|---|
| committer | Corey Minyard <cminyard@mvista.com> | 2019-02-27 21:06:08 -0600 |
| commit | c203d4514b9c8c1c3bf25988a81edf3813eb3c6d (patch) | |
| tree | 6613c17625561ff673d7b7962a73fb8f0d81097e | |
| parent | 1042b22dcbc23be124b2ebfb15a363cf7a36914c (diff) | |
| download | qemu-c203d4514b9c8c1c3bf25988a81edf3813eb3c6d.zip qemu-c203d4514b9c8c1c3bf25988a81edf3813eb3c6d.tar.gz qemu-c203d4514b9c8c1c3bf25988a81edf3813eb3c6d.tar.bz2 | |
i2c: Verify that the count passed in to smbus_eeprom_init() is valid
Keep someone from passing in a bogus number
Signed-off-by: Corey Minyard <cminyard@mvista.com>
| -rw-r--r-- | hw/i2c/smbus_eeprom.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/hw/i2c/smbus_eeprom.c b/hw/i2c/smbus_eeprom.c index 0ba5763..37167e7 100644 --- a/hw/i2c/smbus_eeprom.c +++ b/hw/i2c/smbus_eeprom.c @@ -180,6 +180,8 @@ void smbus_eeprom_init(I2CBus *smbus, int nb_eeprom, { int i; /* XXX: make this persistent */ + + assert(nb_eeprom <= 8); uint8_t *eeprom_buf = g_malloc0(8 * SMBUS_EEPROM_SIZE); if (eeprom_spd_size > 0) { memcpy(eeprom_buf, eeprom_spd, eeprom_spd_size); |