<div dir="ltr">---<br>
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 2 +-<br>
 1 file changed, 1 insertion(+), 1 deletion(-)<br>
<br>
diff --git a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c<br>
index 87daa78a32b8..17f2756a64dc 100644<br>
--- a/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c<br>
+++ b/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c<br>
@@ -263,7 +263,7 @@ static ssize_t dp_link_settings_write(struct file *f, const char __user *buf,<br>
        if (!wr_buf)<br>
                return -ENOSPC;<br>
<br>
-       if (parse_write_buffer_into_params(wr_buf, size,<br>
+       if (parse_write_buffer_into_params(wr_buf, wr_buf_size,<br>
                                           (long *)param, buf,<br>
                                           max_param_num,<br>
                                           &param_nums)) {<font color="#888888"><br></font><div><font color="#888888">
-- </font><span style="font-family:arial,sans-serif"><font size="2"><br></font></span><h2 id="gmail-:7r" class="gmail-hP" tabindex="-1"><span style="font-weight:normal"><span style="font-family:arial,sans-serif"><font size="2">Size
 can be any value and is user controlled resulting in overwriting the 40
 byte array wr_buf with an arbitrary length of data from buf.</font></span></span></h2></div>Signed-off-by: Thelford Williams <<a href="mailto:tdwilliamsiv@gmail.com">tdwilliamsiv@gmail.com</a>><br></div>