ieee1394: video1394: Use memdup_user
authorJulia Lawall <julia@diku.dk>
Sat, 22 May 2010 08:22:00 +0000 (10:22 +0200)
committerStefan Richter <stefanr@s5r6.in-berlin.de>
Mon, 31 May 2010 16:49:52 +0000 (18:49 +0200)
...when user data is immediately copied into the allocated region.

Signed-off-by: Julia Lawall <julia@diku.dk>
Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de> (changelog)
drivers/ieee1394/video1394.c

index a42bd68..a77483b 100644 (file)
@@ -1045,14 +1045,9 @@ static long video1394_ioctl(struct file *file,
                        if (get_user(qv, &p->packet_sizes))
                                return -EFAULT;
 
-                       psizes = kmalloc(buf_size, GFP_KERNEL);
-                       if (!psizes)
-                               return -ENOMEM;
-
-                       if (copy_from_user(psizes, qv, buf_size)) {
-                               kfree(psizes);
-                               return -EFAULT;
-                       }
+                       psizes = memdup_user(qv, buf_size);
+                       if (IS_ERR(psizes))
+                               return PTR_ERR(psizes);
                }
 
                spin_lock_irqsave(&d->lock,flags);