diff options
| author | fire855 <thefire855@gmail.com> | 2016-07-11 20:43:14 +0200 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2016-08-26 16:02:15 +0200 |
| commit | f18c58d20bbd82b3c621ce880ef0674b48d26452 (patch) | |
| tree | d7cfaa4647bd1a2ba3433d87c91247e221c3567a | |
| parent | 7c6ae0e9fe2f82b13bb751143feb933a83a96ac3 (diff) | |
Fix "stack overflow in Mediatek Thermal driver" issue
Based on: https://android.googlesource.com/kernel/mediatek/+/5b3055f1c7ef9eb9fc703b4ffdbbd1bbee68a980
| -rw-r--r-- | drivers/misc/mediatek/thermal/mt6735/mtk_ts_wmt.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/misc/mediatek/thermal/mt6735/mtk_ts_wmt.c b/drivers/misc/mediatek/thermal/mt6735/mtk_ts_wmt.c index f82269f5d..a56e90004 100644 --- a/drivers/misc/mediatek/thermal/mt6735/mtk_ts_wmt.c +++ b/drivers/misc/mediatek/thermal/mt6735/mtk_ts_wmt.c @@ -962,6 +962,7 @@ ssize_t wmt_tm_wfd_write(struct file *filp, const char __user *buf, size_t len, int ret = 0; char tmp[MAX_LEN] = {0}; + len = min(len,MAX_LEN-1); /* write data to the buffer */ if (copy_from_user(tmp, buf, len)) { return -EFAULT; |