1 files changed, 4 insertions, 1 deletions

diff --git a/fs/romfs/mmap-nommu.c b/fs/romfs/mmap-nommu.c
index e1a7779dd3cb..f373bde8f545 100644
--- a/fs/romfs/mmap-nommu.c
+++ b/fs/romfs/mmap-nommu.c
@@ -49,8 +49,11 @@ static unsigned long romfs_get_unmapped_area(struct file *file,
                 return (unsigned long) -EINVAL;
 
         offset += ROMFS_I(inode)->i_dataoffset;
-        if (offset > mtd->size - len)
+        if (offset >= mtd->size)
                 return (unsigned long) -EINVAL;
+        /* the mapping mustn't extend beyond the EOF */
+        if ((offset + len) > mtd->size)
+                len = mtd->size - offset;
 
         ret = mtd_get_unmapped_area(mtd, len, offset, flags);
         if (ret == -EOPNOTSUPP)