diff options
| author | Narender Ankam <nankam@codeaurora.org> | 2017-08-24 15:06:02 +0530 |
|---|---|---|
| committer | Narender Ankam <nankam@codeaurora.org> | 2017-08-24 17:01:06 +0530 |
| commit | 27d4a476f6aa84db74fcc5b65d87210d96b019cd (patch) | |
| tree | 7c5d4edc94c84b16c490e73554f3e4bf510409c4 /drivers/video/fbdev | |
| parent | a5665f1625b3a10c69d6969ee7ec94e8af4d2f41 (diff) | |
msm: mdss: hdmi: correctly validate the cec msg frame size
HDMI CEC message is being validated against the operand
size (MAX_OPERAND_SIZE). Instead validate against the
frame size (MAX_CEC_FRAME_SIZE).
Change-Id: I9fd66781feedbe9bc1090b0e28ef9d814edcca5a
Signed-off-by: Narender Ankam <nankam@codeaurora.org>
Diffstat (limited to 'drivers/video/fbdev')
| -rw-r--r-- | drivers/video/fbdev/msm/mdss_cec_core.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/video/fbdev/msm/mdss_cec_core.c b/drivers/video/fbdev/msm/mdss_cec_core.c index 4b53b01be709..1d9950494d65 100644 --- a/drivers/video/fbdev/msm/mdss_cec_core.c +++ b/drivers/video/fbdev/msm/mdss_cec_core.c @@ -1,4 +1,4 @@ -/* Copyright (c) 2015-2016, The Linux Foundation. All rights reserved. +/* Copyright (c) 2015-2017, The Linux Foundation. All rights reserved. * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License version 2 and @@ -681,7 +681,7 @@ static ssize_t cec_wta_msg(struct device *dev, } spin_unlock_irqrestore(&ctl->lock, flags); - if (msg->frame_size > MAX_OPERAND_SIZE) { + if (msg->frame_size > MAX_CEC_FRAME_SIZE) { pr_err("msg frame too big!\n"); ret = -EINVAL; goto end; |