target/linux/brcm2708/patches-4.4/0498-fbmem-Ensure-that-parameters-are-properly-checked-wi.patch

   1 From b5dd047d429d99a2e9a567d29df581e21e7ba071 Mon Sep 17 00:00:00 2001
   2 From: popcornmix <popcornmix@gmail.com>
   3 Date: Wed, 7 Sep 2016 16:57:59 +0100
   4 Subject: [PATCH] fbmem: Ensure that parameters are properly checked within
   5  fb_copyarea_user
   6
   7 ---
   8  drivers/video/fbdev/core/fbmem.c | 8 +++++++-
   9  1 file changed, 7 insertions(+), 1 deletion(-)
  10
  11 --- a/drivers/video/fbdev/core/fbmem.c
  12 +++ b/drivers/video/fbdev/core/fbmem.c
  13 @@ -1090,7 +1090,13 @@ static int fb_copyarea_user(struct fb_in
  14         int ret = 0;
  15         if (!lock_fb_info(info))
  16                 return -ENODEV;
  17 -       if (copy->dx + copy->width > info->var.xres ||
  18 +       if (copy->dx >= info->var.xres ||
  19 +           copy->sx >= info->var.xres ||
  20 +           copy->width > info->var.xres ||
  21 +           copy->dy >= info->var.yres ||
  22 +           copy->sy >= info->var.yres ||
  23 +           copy->height > info->var.yres ||
  24 +           copy->dx + copy->width > info->var.xres ||
  25             copy->sx + copy->width > info->var.xres ||
  26             copy->dy + copy->height > info->var.yres ||
  27             copy->sy + copy->height > info->var.yres) {