evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

msm: mdss: hdmi: correctly validate the cec msg frame size

Browse source 
HDMI CEC message is being validated against the operand
size (MAX_OPERAND_SIZE). Instead validate against the
frame size (MAX_CEC_FRAME_SIZE).

Change-Id: I9fd66781feedbe9bc1090b0e28ef9d814edcca5a
Signed-off-by: Narender Ankam <nankam@codeaurora.org>
This commit is contained in:
Narender Ankam 2017-08-24 15:06:02 +05:30
parent a5665f1625
commit 27d4a476f6
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
drivers/video/fbdev/msm/mdss_cec_core.c
View file

@ -1,4 +1,4 @@
/* Copyright (c) 2015-2016, The Linux Foundation. All rights reserved.
/* Copyright (c) 2015-2017, The Linux Foundation. All rights reserved.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 2 and
@ -681,7 +681,7 @@ static ssize_t cec_wta_msg(struct device *dev,
}
spin_unlock_irqrestore(&ctl->lock, flags);
if (msg->frame_size > MAX_OPERAND_SIZE) {
if (msg->frame_size > MAX_CEC_FRAME_SIZE) {
pr_err("msg frame too big!\n");
ret = -EINVAL;
goto end;