diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2016-07-20 08:07:31 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-07-20 08:07:31 -0700 |
| commit | 135ada4b84272590372835d8a7590b54f00a135d (patch) | |
| tree | 42bf052aaad0b8d64e95da6e1a7bcaa84817cb7b /drivers | |
| parent | 043976c57ff0ce3284332683b96f4652e815abb1 (diff) | |
| parent | f009a48f80da5bcc9572bb381f214d3c77fc6c93 (diff) | |
Merge "wcnss: Avoid user buffer overloading for write cal data"
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/net/wireless/wcnss/wcnss_wlan.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/net/wireless/wcnss/wcnss_wlan.c b/drivers/net/wireless/wcnss/wcnss_wlan.c index 86f3a4800d1d..3f9eeabc5464 100644 --- a/drivers/net/wireless/wcnss/wcnss_wlan.c +++ b/drivers/net/wireless/wcnss/wcnss_wlan.c @@ -3339,7 +3339,7 @@ static ssize_t wcnss_wlan_write(struct file *fp, const char __user return -EFAULT; if ((UINT32_MAX - count < penv->user_cal_rcvd) || - MAX_CALIBRATED_DATA_SIZE < count + penv->user_cal_rcvd) { + (penv->user_cal_exp_size < count + penv->user_cal_rcvd)) { pr_err(DEVICE " invalid size to write %zu\n", count + penv->user_cal_rcvd); rc = -ENOMEM; |