diff --git a/drivers/amlogic/input/remote/remote_cdev.c b/drivers/amlogic/input/remote/remote_cdev.c index 60d1be2a74c1..1c8bebf81761 100644 --- a/drivers/amlogic/input/remote/remote_cdev.c +++ b/drivers/amlogic/input/remote/remote_cdev.c @@ -71,6 +71,13 @@ static long remote_ioctl(struct file *file, unsigned int cmd, retval = -EFAULT; goto err; } + + if (value < 1 || value > MAX_KEYMAP_SIZE) { + chip->key_num.update_flag = false; + retval = -EINVAL; + goto err; + } + chip->key_num.update_flag = true; chip->key_num.value = value; break;