Input: evdev - fix EVIOCG{type} ioctl
The 'max' size passed into the function is measured in number of bits (KEY_MAX, LED_MAX, etc) so we need to convert it accordingly before trying to copy the data out, otherwise we will try copying too much and end up with up with a page fault. Reported-by:Pavel Machek <pavel@ucw.cz> Reviewed-by:
Pavel Machek <pavel@ucw.cz> Reviewed-by:
David Herrmann <dh.herrmann@gmail.com> Signed-off-by:
Dmitry Torokhov <dmitry.torokhov@gmail.com>
parent
042e1c79
Please register or sign in to comment