From: Dingchen Zhang <[email protected]>

[ Upstream commit 72a848f5c46bab4c921edc9cbffd1ab273b2be17 ]

userspace may transfer a newline, and this terminating newline
is replaced by a '\0' to avoid followup issues.

'len-1' is the index to replace the newline of CRC source name.

v3: typo fix (Sam)

v2: update patch subject, body and format. (Sam)

Cc: Leo Li <[email protected]>
Cc: Harry Wentland <[email protected]>
Cc: Sam Ravnborg <[email protected]>
Signed-off-by: Dingchen Zhang <[email protected]>
Reviewed-by: Sam Ravnborg <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Link: 
https://patchwork.freedesktop.org/patch/msgid/[email protected]
Signed-off-by: Sasha Levin <[email protected]>
---
 drivers/gpu/drm/drm_debugfs_crc.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/drivers/gpu/drm/drm_debugfs_crc.c 
b/drivers/gpu/drm/drm_debugfs_crc.c
index c88e5ff41add6..a3c756710845e 100644
--- a/drivers/gpu/drm/drm_debugfs_crc.c
+++ b/drivers/gpu/drm/drm_debugfs_crc.c
@@ -101,8 +101,8 @@ static ssize_t crc_control_write(struct file *file, const 
char __user *ubuf,
        if (IS_ERR(source))
                return PTR_ERR(source);
 
-       if (source[len] == '\n')
-               source[len] = '\0';
+       if (source[len - 1] == '\n')
+               source[len - 1] = '\0';
 
        spin_lock_irq(&crc->lock);
 
-- 
2.20.1

_______________________________________________
dri-devel mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/dri-devel

Reply via email to