disp: msm: sde: add check before buffer copy
This change adds a check for the length of the buffer before copying it to avoid a buffer overflow. Change-Id: I9af9d422e0b3cf02c8d6662af3310337a9861a7a Signed-off-by: Satya Rama Aditya Pinapala <psraditya30@codeaurora.org>
这个提交包含在:
@@ -1102,6 +1102,7 @@ end:
|
||||
if (blen <= 0)
|
||||
return 0;
|
||||
|
||||
blen = min_t(size_t, MAX_BUFFER_SIZE, count);
|
||||
if (copy_to_user(buf, buffer, blen))
|
||||
return -EFAULT;
|
||||
|
||||
@@ -1195,6 +1196,7 @@ end:
|
||||
if (blen <= 0)
|
||||
return 0;
|
||||
|
||||
blen = min_t(size_t, MAX_BUFFER_SIZE, count);
|
||||
if (copy_to_user(buf, buffer, blen))
|
||||
return -EFAULT;
|
||||
|
||||
|
在新工单中引用
屏蔽一个用户