From: Peter Samuelson Fix limit check in FBIOPUT_CON2FBMAP ioctl. Signed-off-by: Peter Samuelson Cc: Geert Uytterhoeven Cc: "Antonino A. Daplas" Signed-off-by: Andrew Morton --- drivers/video/fbmem.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN drivers/video/fbmem.c~fbmem-fix-con2fbmap-limit-check drivers/video/fbmem.c --- a/drivers/video/fbmem.c~fbmem-fix-con2fbmap-limit-check +++ a/drivers/video/fbmem.c @@ -1057,7 +1057,7 @@ fb_ioctl(struct inode *inode, struct fil case FBIOPUT_CON2FBMAP: if (copy_from_user(&con2fb, argp, sizeof(con2fb))) return - EFAULT; - if (con2fb.console < 0 || con2fb.console > MAX_NR_CONSOLES) + if (con2fb.console < 1 || con2fb.console > MAX_NR_CONSOLES) return -EINVAL; if (con2fb.framebuffer < 0 || con2fb.framebuffer >= FB_MAX) return -EINVAL; _