From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Thu, 4 Jun 2015 08:59:34 +0000 (+0300)
Subject: staging: wilc1000: prevent some overflows in debugfs
X-Git-Tag: v4.14-rc1~5163^2~338
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=9ee81443b99ae3a022ba145ed62e22a5173e33f6;p=platform%2Fkernel%2Flinux-rpi.git

staging: wilc1000: prevent some overflows in debugfs

Add some limits here so we don't corrupt memory.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---

diff --git a/drivers/staging/wilc1000/wilc_debugfs.c b/drivers/staging/wilc1000/wilc_debugfs.c
index 74b9fd5..c328208c 100644
--- a/drivers/staging/wilc1000/wilc_debugfs.c
+++ b/drivers/staging/wilc1000/wilc_debugfs.c
@@ -53,6 +53,9 @@ static ssize_t wilc_debug_level_write(struct file *filp, const char *buf, size_t
 	char buffer[128] = {};
 	int flag = 0;
 
+	if (count > sizeof(buffer))
+		return -EINVAL;
+
 	if (copy_from_user(buffer, buf, count)) {
 		return -EFAULT;
 	}
@@ -99,6 +102,9 @@ static ssize_t wilc_debug_region_write(struct file *filp, const char *buf, size_
 	char buffer[128] = {};
 	int flag;
 
+	if (count > sizeof(buffer))
+		return -EINVAL;
+
 	if (copy_from_user(buffer, buf, count)) {
 		return -EFAULT;
 	}