--- drivers/parisc/led.c

+++ drivers/parisc/led.c

@@ -182,16 +182,18 @@ static int led_proc_read(char *page, cha

static int led_proc_write(struct file *file, const char *buf,

unsigned long count, void *data)

{

- char *cur, lbuf[count + 1];

+ char *cur, lbuf[32];

int d;

if (!capable(CAP_SYS_ADMIN))

return -EACCES;

- memset(lbuf, 0, count + 1);

+ if (count >= sizeof(lbuf))

+ count = sizeof(lbuf)-1;

if (copy_from_user(lbuf, buf, count))

return -EFAULT;

+ lbuf[count] = 0;

cur = lbuf;