tree a6413e0a1443e81f1908a6f87cbb4b6648ae6e47
parent a75de77211842a7e120ce95ad156e4b3704dcde7
author Dan Carpenter <dan.carpenter@oracle.com> 1518074624 +0300
committer Mark Brown <broonie@kernel.org> 1518104146 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQFHBAABCgAxFiEEreZoqmdXGLWf4p/qJNaLcl1Uh9AFAlp8bl8THGJyb29uaWVA
 a2VybmVsLm9yZwAKCRAk1otyXVSH0M11B/96sAUcgClY96Fg04yWtWOFgoKslBXT
 7scrC+nYGUWINMKnW3VsTylBN+y3ikAFEYa4ImSsAj1eZXXSvJI2oN7eZR2RTjdv
 EAwtiPBfh50h6pBaPKbv95KdjCpaZD3ZgJX4FLUVQxMqp+dopkyW03Zuw3rX1AAN
 4xFiy8w06u+vwOWcPF340LaH8MTf4u4AAkZsT/sz/qwE6mgcAdz7IkJSvpCAoRZa
 SwC0sj41YDf5adMbki1SJPNw1eh4+r9EhmVXtLdQYUyiPbkWc495w1syicGmSSW9
 jmCbKWTgIh8yopLM02EhWiErSpKdpdVgq2hwA1mAx7RpXi7l/LstYJdm
 =twZS
 -----END PGP SIGNATURE-----

regmap: Fix reversed bounds check in regmap_raw_write()

We're supposed to be checking that "val_len" is not too large but
instead we check if it is smaller than the max.

The only function affected would be regmap_i2c_smbus_i2c_write() in
drivers/base/regmap/regmap-i2c.c.  Strangely that function has its own
limit check which returns an error if (count >= I2C_SMBUS_BLOCK_MAX) so
it doesn't look like it has ever been able to do anything except return
an error.

Fixes: c335931ed9d2 ("regmap: Add raw_write/read checks for max_raw_write/read sizes")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Mark Brown <broonie@kernel.org>
Cc: stable@vger.kernel.org