提交 38ea6e62 编写于 作者: L Linus Torvalds
...@@ -1183,10 +1183,14 @@ static size_t sg_copy_end_to_buffer(struct scatterlist *sgl, unsigned int nents, ...@@ -1183,10 +1183,14 @@ static size_t sg_copy_end_to_buffer(struct scatterlist *sgl, unsigned int nents,
/* Copy part of this segment */ /* Copy part of this segment */
ignore = skip - offset; ignore = skip - offset;
len = miter.length - ignore; len = miter.length - ignore;
if (boffset + len > buflen)
len = buflen - boffset;
memcpy(buf + boffset, miter.addr + ignore, len); memcpy(buf + boffset, miter.addr + ignore, len);
} else { } else {
/* Copy all of this segment */ /* Copy all of this segment (up to buflen) */
len = miter.length; len = miter.length;
if (boffset + len > buflen)
len = buflen - boffset;
memcpy(buf + boffset, miter.addr, len); memcpy(buf + boffset, miter.addr, len);
} }
boffset += len; boffset += len;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册