From: Geert Uytterhoeven <geert@linux-m68k.org>
Date: Wed, 8 Nov 2006 06:48:45 +0000 (+0100)
Subject: fbdev: correct buffer size limit in fbmem_read_proc()
X-Git-Tag: v2.6.16.32-rc1~22
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5f4b6b038a617c333fd4c3b6d66ca31c51dddd5f;p=thirdparty%2Fkernel%2Fstable.git

fbdev: correct buffer size limit in fbmem_read_proc()

Address http://bugzilla.kernel.org/show_bug.cgi?id=7189

It should check `clen', not `len'.

Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
Signed-off-by: Adrian Bunk <bunk@stusta.de>
---

diff --git a/drivers/video/fbmem.c b/drivers/video/fbmem.c
index b3094aeda1ef4..b1b4d1342f0df 100644
--- a/drivers/video/fbmem.c
+++ b/drivers/video/fbmem.c
@@ -554,7 +554,8 @@ static int fbmem_read_proc(char *buf, char **start, off_t offset,
 	int clen;
 
 	clen = 0;
-	for (fi = registered_fb; fi < &registered_fb[FB_MAX] && len < 4000; fi++)
+	for (fi = registered_fb; fi < &registered_fb[FB_MAX] && clen < 4000;
+	     fi++)
 		if (*fi)
 			clen += sprintf(buf + clen, "%d %s\n",
 				        (*fi)->node,