2.4.36-stable kernel tree
リビジョン | e9a9ea99d0089e4d5a2e3263458957ced5dbe83e (tree) |
---|---|
日時 | 2006-09-29 06:27:38 |
作者 | Geert Uytterhoeven <geert@linu...> |
コミッター | Willy Tarreau |
[PATCH] fbdev: correct buffer size limit in fbmem_read_proc()
Address http://bugzilla.kernel.org/show_bug.cgi?id=7189
It should check clen', not len'.
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: <jurij@wooyd.org>
Cc: "Antonino A. Daplas" <adaplas@pol.net>
Cc: <stable@kernel.org>
Cc: Willy Tarreau <w@1wt.eu>
Signed-off-by: Andrew Morton <akpm@osdl.org>
@@ -388,7 +388,7 @@ static int fbmem_read_proc(char *buf, char **start, off_t offset, | ||
388 | 388 | int clen; |
389 | 389 | |
390 | 390 | clen = 0; |
391 | - for (fi = registered_fb; fi < ®istered_fb[FB_MAX] && len < 4000; fi++) | |
391 | + for (fi = registered_fb; fi < ®istered_fb[FB_MAX] && clen < 4000; fi++) | |
392 | 392 | if (*fi) |
393 | 393 | clen += sprintf(buf + clen, "%d %s\n", |
394 | 394 | GET_FB_IDX((*fi)->node), |