commit | 87139e53f554d92d2c16bc051b8ed4f68bab1080 | [log] [tgz] |
---|---|---|
author | Rashi Bindra <rbindra@codeaurora.org> | Mon Mar 19 14:07:27 2018 +0530 |
committer | abel_fang <Abel_Fang@compal.com> | Mon Jul 23 13:58:35 2018 +0800 |
tree | 00ad349e15b0bff352f3f80f5560fdbca27b8abb | |
parent | a8d464752a00c852953cc1b5fbcdb5af439d7e7e [diff] |
msm: mdss: Fix for wrong length in copy_to_user The caller could have a small buf passed (less then < blen). Since, the length of count and blen is not checked, it can write beyond the end of buf. Change-Id: I9138cd742b6166937f3cc1cbf1af36f280c94bdb Signed-off-by: Rashi Bindra <rbindra@codeaurora.org>