Avoid beyond bounds copy while caching ACL
[zen-stable.git] / drivers / video / fb_sys_fops.c
blobff275d7f3eaf128085aeb7dbdee2826b145fe9d6
1 /*
2 * linux/drivers/video/fb_sys_read.c - Generic file operations where
3 * framebuffer is in system RAM
5 * Copyright (C) 2007 Antonino Daplas <adaplas@pol.net>
7 * This file is subject to the terms and conditions of the GNU General Public
8 * License. See the file COPYING in the main directory of this archive
9 * for more details.
12 #include <linux/fb.h>
13 #include <linux/module.h>
14 #include <linux/uaccess.h>
16 ssize_t fb_sys_read(struct fb_info *info, char __user *buf, size_t count,
17 loff_t *ppos)
19 unsigned long p = *ppos;
20 void *src;
21 int err = 0;
22 unsigned long total_size;
24 if (info->state != FBINFO_STATE_RUNNING)
25 return -EPERM;
27 total_size = info->screen_size;
29 if (total_size == 0)
30 total_size = info->fix.smem_len;
32 if (p >= total_size)
33 return 0;
35 if (count >= total_size)
36 count = total_size;
38 if (count + p > total_size)
39 count = total_size - p;
41 src = (void __force *)(info->screen_base + p);
43 if (info->fbops->fb_sync)
44 info->fbops->fb_sync(info);
46 if (copy_to_user(buf, src, count))
47 err = -EFAULT;
49 if (!err)
50 *ppos += count;
52 return (err) ? err : count;
54 EXPORT_SYMBOL_GPL(fb_sys_read);
56 ssize_t fb_sys_write(struct fb_info *info, const char __user *buf,
57 size_t count, loff_t *ppos)
59 unsigned long p = *ppos;
60 void *dst;
61 int err = 0;
62 unsigned long total_size;
64 if (info->state != FBINFO_STATE_RUNNING)
65 return -EPERM;
67 total_size = info->screen_size;
69 if (total_size == 0)
70 total_size = info->fix.smem_len;
72 if (p > total_size)
73 return -EFBIG;
75 if (count > total_size) {
76 err = -EFBIG;
77 count = total_size;
80 if (count + p > total_size) {
81 if (!err)
82 err = -ENOSPC;
84 count = total_size - p;
87 dst = (void __force *) (info->screen_base + p);
89 if (info->fbops->fb_sync)
90 info->fbops->fb_sync(info);
92 if (copy_from_user(dst, buf, count))
93 err = -EFAULT;
95 if (!err)
96 *ppos += count;
98 return (err) ? err : count;
100 EXPORT_SYMBOL_GPL(fb_sys_write);
102 MODULE_AUTHOR("Antonino Daplas <adaplas@pol.net>");
103 MODULE_DESCRIPTION("Generic file read (fb in system RAM)");
104 MODULE_LICENSE("GPL");