Module Name:    src
Committed By:   mlelstv
Date:           Wed Jun 29 15:33:45 UTC 2022

Modified Files:
        src/sys/dev/i2c: i2c.c

Log Message:
Allocate data buffer instead of using the stack.


To generate a diff of this commit:
cvs rdiff -u -r1.86 -r1.87 src/sys/dev/i2c/i2c.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/dev/i2c/i2c.c
diff -u src/sys/dev/i2c/i2c.c:1.86 src/sys/dev/i2c/i2c.c:1.87
--- src/sys/dev/i2c/i2c.c:1.86	Fri Apr  1 15:49:12 2022
+++ src/sys/dev/i2c/i2c.c	Wed Jun 29 15:33:45 2022
@@ -1,4 +1,4 @@
-/*	$NetBSD: i2c.c,v 1.86 2022/04/01 15:49:12 pgoyette Exp $	*/
+/*	$NetBSD: i2c.c,v 1.87 2022/06/29 15:33:45 mlelstv Exp $	*/
 
 /*
  * Copyright (c) 2003 Wasabi Systems, Inc.
@@ -53,7 +53,7 @@
 #endif /* _KERNEL_OPT */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: i2c.c,v 1.86 2022/04/01 15:49:12 pgoyette Exp $");
+__KERNEL_RCSID(0, "$NetBSD: i2c.c,v 1.87 2022/06/29 15:33:45 mlelstv Exp $");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -819,7 +819,7 @@ static int
 iic_ioctl_exec(struct iic_softc *sc, i2c_ioctl_exec_t *iie, int flag)
 {
 	i2c_tag_t ic = sc->sc_tag;
-	uint8_t buf[I2C_EXEC_MAX_BUFLEN];
+	uint8_t *buf = NULL;
 	void *cmd = NULL;
 	int error;
 
@@ -849,10 +849,13 @@ iic_ioctl_exec(struct iic_softc *sc, i2c
 			goto out;
 	}
 
-	if (iie->iie_buf != NULL && I2C_OP_WRITE_P(iie->iie_op)) {
-		error = copyin(iie->iie_buf, buf, iie->iie_buflen);
-		if (error)
-			goto out;
+	if (iie->iie_buf != NULL) {
+		buf = kmem_alloc(iie->iie_buflen, KM_SLEEP);
+		if (I2C_OP_WRITE_P(iie->iie_op)) {
+			error = copyin(iie->iie_buf, buf, iie->iie_buflen);
+			if (error)
+				goto out;
+		}
 	}
 
 	iic_acquire_bus(ic, 0);
@@ -867,15 +870,18 @@ iic_ioctl_exec(struct iic_softc *sc, i2c
 		error = EIO;
 
 out:
+	if (iie->iie_buf != NULL && I2C_OP_READ_P(iie->iie_op))
+		error = copyout(buf, iie->iie_buf, iie->iie_buflen);
+
+	if (buf)
+		kmem_free(buf, iie->iie_buflen);
+
 	if (cmd)
 		kmem_free(cmd, iie->iie_cmdlen);
 
 	if (error)
 		return error;
 
-	if (iie->iie_buf != NULL && I2C_OP_READ_P(iie->iie_op))
-		error = copyout(buf, iie->iie_buf, iie->iie_buflen);
-
 	return error;
 }
 

Reply via email to