Commit d8c1fa4a authored by Julia Lawall's avatar Julia Lawall Committed by Stefan Richter

ieee1394: video1394: Use memdup_user

...when user data is immediately copied into the allocated region.
Signed-off-by: default avatarJulia Lawall <julia@diku.dk>
Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de> (changelog)
parent 3014420b
...@@ -1045,14 +1045,9 @@ static long video1394_ioctl(struct file *file, ...@@ -1045,14 +1045,9 @@ static long video1394_ioctl(struct file *file,
if (get_user(qv, &p->packet_sizes)) if (get_user(qv, &p->packet_sizes))
return -EFAULT; return -EFAULT;
psizes = kmalloc(buf_size, GFP_KERNEL); psizes = memdup_user(qv, buf_size);
if (!psizes) if (IS_ERR(psizes))
return -ENOMEM; return PTR_ERR(psizes);
if (copy_from_user(psizes, qv, buf_size)) {
kfree(psizes);
return -EFAULT;
}
} }
spin_lock_irqsave(&d->lock,flags); spin_lock_irqsave(&d->lock,flags);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment