diff --git a/msm/sde/sde_connector.c b/msm/sde/sde_connector.c index 844d2b859016..9900ce8c56f2 100644 --- a/msm/sde/sde_connector.c +++ b/msm/sde/sde_connector.c @@ -1698,6 +1698,7 @@ static ssize_t _sde_debugfs_conn_cmd_tx_sts_read(struct file *file, return 0; } + blen = min_t(size_t, MAX_CMD_PAYLOAD_SIZE, count); if (copy_to_user(buf, buffer, blen)) { SDE_ERROR("copy to user buffer failed\n"); return -EFAULT; diff --git a/msm/sde_rsc.c b/msm/sde_rsc.c index 0a706219168d..79e385c0a22f 100644 --- a/msm/sde_rsc.c +++ b/msm/sde_rsc.c @@ -1102,6 +1102,7 @@ end: if (blen <= 0) return 0; + blen = min_t(size_t, MAX_BUFFER_SIZE, count); if (copy_to_user(buf, buffer, blen)) return -EFAULT; @@ -1195,6 +1196,7 @@ end: if (blen <= 0) return 0; + blen = min_t(size_t, MAX_BUFFER_SIZE, count); if (copy_to_user(buf, buffer, blen)) return -EFAULT;