[PATCH] stradis overflow check

4ea8da0b · Dave Jones · 020cbcea · 4ea8da0b
Commit 4ea8da0b authored Nov 25, 2002 by Dave Jones
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

drivers/media/video/stradis.c drivers/media/video/stradis.c +3 -0

No files found.
--- a/drivers/media/video/stradis.c
+++ b/drivers/media/video/stradis.c
@@ -1428,6 +1428,9 @@ static int saa_ioctl(struct video_device *dev, unsigned int cmd, void *arg)
 				if (copy_from_user(saa->dmavid2, vw.clips,
 						   VIDEO_CLIPMAP_SIZE))
 					return -EFAULT;
+			}
+			else if (vw.clipcount > 16384) {
+				return -EINVAL;
 			} else if (vw.clipcount > 0) {
 				if ((vcp = vmalloc(sizeof(struct video_clip) *
 					        (vw.clipcount))) == NULL)