Merge "fbdev: check size before copying the userdata" (138036dc) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/video/fbdev/core/fbcmap.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -201,6 +201,8 @@ int fb_cmap_to_user(const struct fb_cmap from, struct fb_cmap_user to)
		if (size > (int) (from->len - fromoff))
		size = from->len - fromoff;
		size *= sizeof(u16);
		if (!size)
		return -EINVAL;

		if (copy_to_user(to->red+tooff, from->red+fromoff, size))
		return -EFAULT;