Commit 062c9d45 authored by Al Viro's avatar Al Viro Committed by Martin K. Petersen
parent a62726cb
...@@ -640,13 +640,15 @@ sg_write(struct file *filp, const char __user *buf, size_t count, loff_t * ppos) ...@@ -640,13 +640,15 @@ sg_write(struct file *filp, const char __user *buf, size_t count, loff_t * ppos)
if (count < (SZ_SG_HEADER + 6)) if (count < (SZ_SG_HEADER + 6))
return -EIO; /* The minimum scsi command length is 6 bytes. */ return -EIO; /* The minimum scsi command length is 6 bytes. */
buf += SZ_SG_HEADER;
if (__get_user(opcode, buf))
return -EFAULT;
if (!(srp = sg_add_request(sfp))) { if (!(srp = sg_add_request(sfp))) {
SCSI_LOG_TIMEOUT(1, sg_printk(KERN_INFO, sdp, SCSI_LOG_TIMEOUT(1, sg_printk(KERN_INFO, sdp,
"sg_write: queue full\n")); "sg_write: queue full\n"));
return -EDOM; return -EDOM;
} }
buf += SZ_SG_HEADER;
__get_user(opcode, buf);
mutex_lock(&sfp->f_mutex); mutex_lock(&sfp->f_mutex);
if (sfp->next_cmd_len > 0) { if (sfp->next_cmd_len > 0) {
cmd_size = sfp->next_cmd_len; cmd_size = sfp->next_cmd_len;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment