Commit 1d4bc7dc authored Dec 28, 2017 by Jayant Shekhar Committed by Gerrit - the friendly Code Review server Feb 08, 2018

drm/msm/sde: Fix out of bound access in ESD notify event



For event notification, event length is used to perform
copy to notify structure. Use correct event length such
that there is no out of bound access.

Change-Id: I781c8efc34ec506247554c6ab1dd10f912835da6
Signed-off-by: Jayant Shekhar <jshekhar@codeaurora.org>

parent b2620cbd

drivers/gpu/drm/msm/sde/sde_connector.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1673,7 +1673,7 @@ static void sde_connector_check_status_work(struct work_struct *work)
		conn->base.base.id, conn->encoder->base.id);
		panel_dead = true;
		event.type = DRM_EVENT_PANEL_DEAD;
		event.length = sizeof(u32);
		event.length = sizeof(bool);
		msm_mode_object_event_notify(&conn->base.base,
		conn->base.dev, &event, (u8 *)&panel_dead);
		}