diff options
Diffstat (limited to 'drivers/media/v4l2-core/v4l2-ioctl.c')
-rw-r--r-- | drivers/media/v4l2-core/v4l2-ioctl.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/drivers/media/v4l2-core/v4l2-ioctl.c b/drivers/media/v4l2-core/v4l2-ioctl.c index 16205d9bddfc..11874c170cbe 100644 --- a/drivers/media/v4l2-core/v4l2-ioctl.c +++ b/drivers/media/v4l2-core/v4l2-ioctl.c | |||
@@ -2212,6 +2212,10 @@ static int check_array_args(unsigned int cmd, void *parg, size_t *array_size, | |||
2212 | struct v4l2_subdev_edid *edid = parg; | 2212 | struct v4l2_subdev_edid *edid = parg; |
2213 | 2213 | ||
2214 | if (edid->blocks) { | 2214 | if (edid->blocks) { |
2215 | if (edid->blocks > 256) { | ||
2216 | ret = -EINVAL; | ||
2217 | break; | ||
2218 | } | ||
2215 | *user_ptr = (void __user *)edid->edid; | 2219 | *user_ptr = (void __user *)edid->edid; |
2216 | *kernel_ptr = (void *)&edid->edid; | 2220 | *kernel_ptr = (void *)&edid->edid; |
2217 | *array_size = edid->blocks * 128; | 2221 | *array_size = edid->blocks * 128; |