[PATCH] 2.2 - wanxl unchecked copy_to_user

From: Arnaldo Carvalho de Melo (acme@conectiva.com.br)
Date: Tue Dec 19 2000 - 17:10:02 EST


Hi,

        Please consider applying, there must well be other things to do on
this failure, please check.

                        - Arnaldo

--- linux-2.2.19-2/drivers/net/wanxl.c Wed Jun 7 18:26:43 2000
+++ linux-2.2.19-2.acme/drivers/net/wanxl.c Tue Dec 19 20:05:53 2000
@@ -1088,7 +1088,10 @@
 
         writel(1, &card->config->valid);
   
- copy_to_user(data, card->config, sizeof(board_cfg));
+ if (copy_to_user(data, card->config, sizeof(board_cfg))) {
+ wanxl_destroy_card(card, 0);
+ return -EFAULT;
+ }
         *length=sizeof(board_cfg);
         card->running=1;
         return 0;
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Dec 23 2000 - 21:00:25 EST