diff options
| author | Linux Build Service Account <lnxbuild@quicinc.com> | 2018-01-09 15:40:52 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2018-01-09 15:40:52 -0800 |
| commit | 1707cb3ff140dec01127669e1c88d5b850f272e4 (patch) | |
| tree | 5b50d2711d10fe325f7e1b773c7c32c709130c3b | |
| parent | 413d1c29b6a73c259ab608eb59017a2a828d7cdd (diff) | |
| parent | 1240d01e09fd4d3a351d3d14c5ebed2761c16ad5 (diff) | |
Merge "msm: camera: Prevent buffer overread in write_logsync."
| -rw-r--r-- | drivers/media/platform/msm/camera_v2/msm.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/media/platform/msm/camera_v2/msm.c b/drivers/media/platform/msm/camera_v2/msm.c index 6a969401e950..60532929a916 100644 --- a/drivers/media/platform/msm/camera_v2/msm.c +++ b/drivers/media/platform/msm/camera_v2/msm.c @@ -1288,7 +1288,7 @@ static ssize_t write_logsync(struct file *file, const char __user *buf, uint64_t seq_num = 0; int ret; - if (copy_from_user(lbuf, buf, sizeof(lbuf))) + if (copy_from_user(lbuf, buf, sizeof(lbuf) - 1)) return -EFAULT; ret = sscanf(lbuf, "%llu", &seq_num); |