raspi/linux
1
0
Fork 1
mirror of https://github.com/raspberrypi/linux.git synced 2025-12-06 18:09:56 +00:00
Code Issues Projects Releases Wiki Activity

fbmem: Ensure that parameters are properly checked within fb_copyarea_user

Browse Source
This commit is contained in:
popcornmix
2016-09-07 16:57:59 +01:00
parent 4bc24899b9
commit 48ec07f878
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/video/fbdev/core/fbmem.c
View File

@@ -1090,7 +1090,13 @@ static int fb_copyarea_user(struct fb_info *info,
int ret = 0; int ret = 0;
if (!lock_fb_info(info)) if (!lock_fb_info(info))
return -ENODEV; return -ENODEV;
if (copy->dx + copy->width > info->var.xres || if (copy->dx >= info->var.xres ||
copy->sx >= info->var.xres ||
copy->width > info->var.xres ||
copy->dy >= info->var.yres ||
copy->sy >= info->var.yres ||
copy->height > info->var.yres ||
copy->dx + copy->width > info->var.xres ||
copy->sx + copy->width > info->var.xres || copy->sx + copy->width > info->var.xres ||
copy->dy + copy->height > info->var.yres || copy->dy + copy->height > info->var.yres ||
copy->sy + copy->height > info->var.yres) { copy->sy + copy->height > info->var.yres) {