Unverified Commit e706c6b6 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!6943 speakup: Avoid crash on very long word 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhang Xiaoxu <zhangxiaoxu5@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ZPXDW5RQUDBEMT25D6LO27PTXOB3EV6D/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9L5L5 
 
Link:https://gitee.com/openeuler/kernel/pulls/6943

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 717ad181 2c41a0db

drivers/accessibility/speakup/main.c

+1 −1
Original line number Diff line number Diff line
@@ -576,7 +576,7 @@ static u_long get_word(struct vc_data *vc) 
	}

	attr_ch = get_char(vc, (u_short *)tmp_pos, &spk_attr);

	buf[cnt++] = attr_ch;

	while (tmpx < vc->vc_cols - 1) {

	while (tmpx < vc->vc_cols - 1 && cnt < sizeof(buf) - 1) {

		tmp_pos += 2;

		tmpx++;

		ch = get_char(vc, (u_short *)tmp_pos, &temp);