Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S272772AbTHKQED (ORCPT ); Mon, 11 Aug 2003 12:04:03 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S272767AbTHKQCf (ORCPT ); Mon, 11 Aug 2003 12:02:35 -0400 Received: from pix-525-pool.redhat.com ([66.187.233.200]:15398 "EHLO lacrosse.corp.redhat.com") by vger.kernel.org with ESMTP id S272783AbTHKP7m (ORCPT ); Mon, 11 Aug 2003 11:59:42 -0400 To: torvalds@osdl.org From: davej@redhat.com Cc: linux-kernel@vger.kernel.org Subject: [PATCH] missing copy_from_user check in comx_proto_lapb driver Message-Id: Date: Mon, 11 Aug 2003 16:59:03 +0100 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 843 Lines: 20 diff -urpN --exclude-from=/home/davej/.exclude bk-linus/drivers/net/wan/comx-proto-lapb.c linux-2.5/drivers/net/wan/comx-proto-lapb.c --- bk-linus/drivers/net/wan/comx-proto-lapb.c 2003-05-20 18:41:21.000000000 +0100 +++ linux-2.5/drivers/net/wan/comx-proto-lapb.c 2003-07-13 06:04:34.000000000 +0100 @@ -232,7 +232,10 @@ static int comxlapb_write_proc(struct fi return -ENOMEM; } - copy_from_user(page, buffer, count); + if (copy_from_user(page, buffer, count)) { + free_page((unsigned long)page); + return -EFAULT; + } if (*(page + count - 1) == '\n') { *(page + count - 1) = 0; } - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/