diff options
| author | Rahul Sharma <rahsha@codeaurora.org> | 2019-08-02 17:53:22 +0530 |
|---|---|---|
| committer | Rahul Sharma <rahsha@codeaurora.org> | 2019-10-25 13:06:30 +0530 |
| commit | 13d43fca0c03920648028fd560fb9e575c8f878d (patch) | |
| tree | aa26c2aceb93df43b135ac3ebae5d4043c875205 /drivers/gpu | |
| parent | fc509761a150060953e80bd1020ecb960fd1dff3 (diff) | |
drm/msm/hdmi-staging: Fix Buffer Overflow
This change is done to check the size of input before doing the
buffer copy.
Change-Id: I01f8b1f3c3b6e920f186f5f90ea9707bb25bcbbc
Signed-off-by: Rahul Sharma <rahsha@codeaurora.org>
Diffstat (limited to 'drivers/gpu')
| -rw-r--r-- | drivers/gpu/drm/msm/hdmi-staging/sde_hdmi.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/drivers/gpu/drm/msm/hdmi-staging/sde_hdmi.c b/drivers/gpu/drm/msm/hdmi-staging/sde_hdmi.c index 5a9e56b58158..d755ba959c20 100644 --- a/drivers/gpu/drm/msm/hdmi-staging/sde_hdmi.c +++ b/drivers/gpu/drm/msm/hdmi-staging/sde_hdmi.c @@ -78,7 +78,12 @@ static ssize_t _sde_hdmi_debugfs_dump_info_read(struct file *file, if (!buf) return -ENOMEM; - len += snprintf(buf, SZ_4K, "name = %s\n", display->name); + len += snprintf(buf, SZ_1K, "name = %s\n", display->name); + + if (len > count) { + kfree(buf); + return -ENOMEM; + } if (copy_to_user(buff, buf, len)) { kfree(buf); |