Browse Source

Fix the security check for framebuffer mapping.

coderain 5 years ago
parent
commit
af25f21d70
1 changed files with 1 additions and 5 deletions
  1. 1 5
      kernel/src/video.c

+ 1 - 5
kernel/src/video.c

@@ -289,11 +289,7 @@ dword_t video_default_control(video_device_t *device,
             video_map_framebuffer_t *params = (video_map_framebuffer_t*)in_buffer;
             void *address = params->address;
             dword_t size = device->current_mode.height * device->current_mode.scanline_size * (device->current_mode.bpp >> 3);
-
-            if (params->offset >= size || params->size >= size || (params->offset + params->size) > size)
-            {
-                return ERR_INVALID;
-            }
+            if (params->offset >= size || params->size > size || (params->offset + params->size) > size) return ERR_INVALID;
 
             if (get_previous_mode() == USER_MODE)
             {