Hi, thank you for fixing this issue! > + if (data && (protocol == I2C_SMBUS_BLOCK_DATA || > + protocol == I2C_SMBUS_BLOCK_PROC_CALL || > + protocol == I2C_SMBUS_I2C_BLOCK_DATA) && > + data->block[0] > I2C_SMBUS_BLOCK_MAX) > + return -EINVAL; Like with your other patch, we should also reject if the length is 0. Happy hacking, Wolfram