diff options
| author | Manoj Rao <manojraj@codeaurora.org> | 2013-08-19 13:47:41 -0700 |
|---|---|---|
| committer | David Keitel <dkeitel@codeaurora.org> | 2016-03-23 20:21:38 -0700 |
| commit | 618fb2ec3f30051fce9b90e2fa2c9bcb604eadd9 (patch) | |
| tree | 8245d17f4d2a02e8a0f12a0cde5424d6311eb77e | |
| parent | 581b360b7fe83c893615b89f6b97698f15e25f1e (diff) | |
msm: mdss: hdmi: bounds check for ieee reg id field
Ensure data is only read from allowed region for
IEEE reg ID field in the EDID data. This prevents
illegal data access beyond the limits of this buffer.
Change-Id: Iee6f1a54be6f1c833da37687c0c8063e3c27f122
CRs-Fixed: 522147
Signed-off-by: Manoj Rao <manojraj@codeaurora.org>
| -rw-r--r-- | drivers/video/fbdev/msm/mdss_hdmi_edid.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/video/fbdev/msm/mdss_hdmi_edid.c b/drivers/video/fbdev/msm/mdss_hdmi_edid.c index 77c72587660d..24bdc082073d 100644 --- a/drivers/video/fbdev/msm/mdss_hdmi_edid.c +++ b/drivers/video/fbdev/msm/mdss_hdmi_edid.c @@ -697,7 +697,7 @@ static u32 hdmi_edid_extract_ieee_reg_id(struct hdmi_edid_ctrl *edid_ctrl, } vsd = hdmi_edid_find_block(in_buf, DBC_START_OFFSET, 3, &len); - if (vsd == NULL) + if (vsd == NULL || len < 8) return 0; DEV_DBG("%s: EDID: VSD PhyAddr=%04x, MaxTMDS=%dMHz\n", __func__, |