Merge "wcnss: Avoid user buffer overloading for write cal data" (0eeff917) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/net/wireless/wcnss/wcnss_wlan.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -3339,7 +3339,7 @@ static ssize_t wcnss_wlan_write(struct file *fp, const char __user
		return -EFAULT;

		if ((UINT32_MAX - count < penv->user_cal_rcvd) \|\|
		MAX_CALIBRATED_DATA_SIZE < count + penv->user_cal_rcvd) {
		(penv->user_cal_exp_size < count + penv->user_cal_rcvd)) {
		pr_err(DEVICE " invalid size to write %zu\n", count +
		penv->user_cal_rcvd);
		rc = -ENOMEM;