Merge "msm: camera: Prevent buffer overread in write_logsync." (76ddfc41) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/media/platform/msm/camera_v2/msm.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1273,7 +1273,7 @@ static ssize_t write_logsync(struct file file, const char __user buf,
		uint64_t seq_num = 0;
		int ret;

		if (copy_from_user(lbuf, buf, sizeof(lbuf)))
		if (copy_from_user(lbuf, buf, sizeof(lbuf) - 1))
		return -EFAULT;

		ret = sscanf(lbuf, "%llu", &seq_num);