dpt_i2o: Fix up copy*user
Signed-off-by: Alan Cox <alan@linux.intel.com> Cc: stable@kernel.org Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
parent
0a53f1693c
commit
ef7562b7f2
@ -1918,6 +1918,10 @@ static int adpt_i2o_passthru(adpt_hba* pHba, u32 __user *arg)
|
|||||||
}
|
}
|
||||||
size = size>>16;
|
size = size>>16;
|
||||||
size *= 4;
|
size *= 4;
|
||||||
|
if (size > MAX_MESSAGE_SIZE) {
|
||||||
|
rcode = EINVAL;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
/* Copy in the user's I2O command */
|
/* Copy in the user's I2O command */
|
||||||
if (copy_from_user (msg, user_msg, size)) {
|
if (copy_from_user (msg, user_msg, size)) {
|
||||||
rcode = -EFAULT;
|
rcode = -EFAULT;
|
||||||
|
Loading…
Reference in New Issue
Block a user