patch-2.4.7 linux/drivers/char/drm/i810_dma.c

• Lines: 12
• Date: Mon Jul 16 15:13:32 2001
• Orig file: v2.4.6/linux/drivers/char/drm/i810_dma.c
• Orig date: Tue Jul 3 17:08:19 2001

diff -u --recursive --new-file v2.4.6/linux/drivers/char/drm/i810_dma.c linux/drivers/char/drm/i810_dma.c
@@ -1416,6 +1416,11 @@
    	buf_priv = buf->dev_private;
 	if (buf_priv->currently_mapped != I810_BUF_MAPPED) return -EPERM;
 
+	/* Stopping end users copying their data to the entire kernel
+	   is good.. */
+	if (d.used < 0 || d.used > buf->total)
+		return -EINVAL;
+		
    	if (copy_from_user(buf_priv->virtual, d.address, d.used))
 		return -EFAULT;