Merge "msm: camera: Prevent buffer overread in write_logsync." (f38ea00b) · Commits · e / devices / android_kernel_xiaomi_markw

drivers/media/platform/msm/camera_v2/msm.c

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -1273,7 +1273,7 @@ static ssize_t write_logsync(struct file file, const char __user buf,
	uint64_t seq_num = 0;		uint64_t seq_num = 0;
	int ret;		int ret;

	if (copy_from_user(lbuf, buf, sizeof(lbuf)))		if (copy_from_user(lbuf, buf, sizeof(lbuf) - 1))
	return -EFAULT;		return -EFAULT;

	ret = sscanf(lbuf, "%llu", &seq_num);		ret = sscanf(lbuf, "%llu", &seq_num);