Merge "drm/msm/dsi-staging: Add length check before copying to user space" (8b46fe9a) · Commits · e / devices / android_kernel_sony_msm8998

drivers/gpu/drm/msm/dsi-staging/dsi_ctrl.c

+7 −1

Original line number	Diff line number	Diff line
		/*
		* Copyright (c) 2016-2018, The Linux Foundation. All rights reserved.
		* Copyright (c) 2016-2019, The Linux Foundation. All rights reserved.
		*
		* This program is free software; you can redistribute it and/or modify
		* it under the terms of the GNU General Public License version 2 and
		@@ -123,6 +123,9 @@ static ssize_t debugfs_state_info_read(struct file *file,
		dsi_ctrl->clk_info.link_clks.pixel_clk_rate,
		dsi_ctrl->clk_info.link_clks.esc_clk_rate);

		if (len > count)
		len = count;

		/* TODO: make sure that this does not exceed 4K */
		if (copy_to_user(buff, buf, len)) {
		kfree(buf);
		@@ -162,6 +165,9 @@ static ssize_t debugfs_reg_dump_read(struct file *file,
		"Core clocks are not turned on, cannot read\n");
		}

		if (len > count)
		len = count;

		/* TODO: make sure that this does not exceed 4K */
		if (copy_to_user(buff, buf, len)) {
		kfree(buf);