eventfd: strictly check the count parameter of eventfd_write to avoid inputting illeg...

[linux-2.6-microblaze.git] / fs / eventfd.c

diff --git a/fs/eventfd.c b/fs/eventfd.c
index fc4d810..9afdb72 100644 (file)
--- a/fs/eventfd.c
+++ b/fs/eventfd.c
@@ -251,7 +251,7 @@ static ssize_t eventfd_write(struct file *file, const char __user *buf, size_t c
        ssize_t res;
        __u64 ucnt;
 
-       if (count < sizeof(ucnt))
+       if (count != sizeof(ucnt))
                return -EINVAL;
        if (copy_from_user(&ucnt, buf, sizeof(ucnt)))
                return -EFAULT;