| commit | e5ef21e336c3d8a1ac787b36c612dd965d060d58 | [log] [tgz] |
|---|---|---|
| author | Rashi Bindra <rbindra@codeaurora.org> | Mon Mar 19 14:07:27 2018 +0530 |
| committer | abel_fang <Abel_Fang@compal.com> | Mon Jul 23 14:01:37 2018 +0800 |
| tree | 3ce5901cc0765fae9e519ff05dd1c7e2e0c308d6 | |
| parent | b379854f67386606f1acc97e4833306acb281a4d [diff] |
msm: mdss: Fix for wrong length in copy_to_user The caller could have a small buf passed (less then < blen). Since, the length of count and blen is not checked, it can write beyond the end of buf. Change-Id: I9138cd742b6166937f3cc1cbf1af36f280c94bdb Signed-off-by: Rashi Bindra <rbindra@codeaurora.org>