Dan Carpenter 24328b80de mei: bus: type promotion bug in mei_nfc_if_version() ... commit b40b3e9358 upstream. We accidentally removed the check for negative returns without considering the issue of type promotion. The "if_version_length" variable is type size_t so if __mei_cl_recv() returns a negative then "bytes_recv" is type promoted to a high positive value and treated as success. Cc: <stable@vger.kernel.org> Fixes: 582ab27a06 ("mei: bus: fix received data size check in NFC fixup") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Tomas Winkler <tomas.winkler@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-09-26 08:35:10 +02:00
..
amthif.c
bus-fixup.c
bus.c
client.c
client.h
debugfs.c
hbm.c
hbm.h
hw-me-regs.h
hw-me.c
hw-me.h
hw-txe-regs.h
hw-txe.c
hw-txe.h
hw.h
init.c
interrupt.c
Kconfig
main.c
Makefile
mei_dev.h
mei-trace.c
mei-trace.h
pci-me.c
pci-txe.c
wd.c