git.openpandora.org
/
pandora-kernel.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
9a3e3d7
)
dpt_i2o: Fix up copy*user
author
Alan Cox
<alan@linux.intel.com>
Tue, 27 Oct 2009 15:35:35 +0000
(15:35 +0000)
committer
Greg Kroah-Hartman
<gregkh@suse.de>
Tue, 10 Nov 2009 00:51:55 +0000
(16:51 -0800)
commit
ef7562b7f28319e6dd1f85dc1af87df2a7a84832
upstream.
Signed-off-by: Alan Cox <alan@linux.intel.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/scsi/dpt_i2o.c
patch
|
blob
|
history
diff --git
a/drivers/scsi/dpt_i2o.c
b/drivers/scsi/dpt_i2o.c
index
7716145
..
2821285
100644
(file)
--- a/
drivers/scsi/dpt_i2o.c
+++ b/
drivers/scsi/dpt_i2o.c
@@
-1918,6
+1918,10
@@
static int adpt_i2o_passthru(adpt_hba* pHba, u32 __user *arg)
}
size = size>>16;
size *= 4;
+ if (size > MAX_MESSAGE_SIZE) {
+ rcode = EINVAL;
+ goto cleanup;
+ }
/* Copy in the user's I2O command */
if (copy_from_user (msg, user_msg, size)) {
rcode = -EFAULT;