Commit a09d2d00 authored by Hyunwoo Kim's avatar Hyunwoo Kim Committed by Helge Deller
Browse files

video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 



In pxa3xx_gcu_write, a count parameter of type size_t is passed to words of
type int.  Then, copy_from_user() may cause a heap overflow because it is used
as the third argument of copy_from_user().

Signed-off-by: default avatarHyunwoo Kim <imv4bel@gmail.com>
Signed-off-by: default avatarHelge Deller <deller@gmx.de>
parent 267173cb
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment