From: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Date: Mon, 6 Oct 2014 17:55:49 +0000 (-0700)
Subject: Input: evdev - fix EVIOCG{type} ioctl
X-Git-Tag: fixes-against-v3.18-rc2~35^2~5^2~11
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7c4f56070fde2367766fa1fb04852599b5e1ad35;p=pandora-kernel.git

Input: evdev - fix EVIOCG{type} ioctl

The 'max' size passed into the function is measured in number of bits
(KEY_MAX, LED_MAX, etc) so we need to convert it accordingly before trying
to copy the data out, otherwise we will try copying too much and end up
with up with a page fault.

Reported-by: Pavel Machek <pavel@ucw.cz>
Reviewed-by: Pavel Machek <pavel@ucw.cz>
Reviewed-by: David Herrmann <dh.herrmann@gmail.com>
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
---

Reading git-diff-tree failed