1 files changed, 6 insertions, 0 deletions

diff --git a/drivers/misc/eeprom/at24.c b/drivers/misc/eeprom/at24.c
index 5d7c0900fa1b..f112c5bc082a 100644
--- a/drivers/misc/eeprom/at24.c
+++ b/drivers/misc/eeprom/at24.c
@@ -257,6 +257,9 @@ static ssize_t at24_read(struct at24_data *at24,
         if (unlikely(!count))
                 return count;
 
+        if (off + count > at24->chip.byte_len)
+                return -EINVAL;
+
         /*
          * Read data from chip, protecting against concurrent updates
          * from this host, but not from other I2C masters.
@@ -311,6 +314,9 @@ static ssize_t at24_eeprom_write(struct at24_data *at24, const char *buf,
         unsigned long timeout, write_time;
         unsigned next_page;
 
+        if (offset + count > at24->chip.byte_len)
+                return -EINVAL;
+
         /* Get corresponding I2C address and adjust offset */
         client = at24_translate_offset(at24, &offset);