Re: [PATCH v2] platform/chrome: sensorhub: Fix memory overread in ring handler
Tzung-Bi Shih <[email protected]> Fri, 3 Jul 2026 03:32:02 +0000
| Newsgroups | dev.linux.lists.chrome-platform |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Jul 02, 2026 at 08:27:45AM +0000, Tzung-Bi Shih wrote:
> `max_response` and `sensor_num` are read from different EC commands:
>
> - `max_response` is from cros_ec_get_proto_info().
> ec_dev->max_response = info->max_response_packet_size -
> sizeof(struct ec_host_response);
>
> - `sensor_num` is from cros_ec_get_sensor_count().
> sensor_num = cros_ec_get_sensor_count(ec);
>
> [...]
Applied to
https://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux.git for-next
[1/1] platform/chrome: sensorhub: Fix memory overread in ring handler
commit: d1ceb2b2324717fa30b44d56ef0c52813e239569
Thanks!