diff options
| author | Randy Dunlap <rddunlap@osdl.org> | 2003-07-18 18:34:28 -0700 |
|---|---|---|
| committer | Steve French <cifs.adm@hostme.bitkeeper.com> | 2003-07-18 18:34:28 -0700 |
| commit | 4fa73e6977327b0edcc99f260355014fdd6ea722 (patch) | |
| tree | 210011b3703a1a60fb7853c01178105494825af3 /drivers/net | |
| parent | 49a3a2cec91137abbe1312ef4dad5339c57b372b (diff) | |
[PATCH] janitor: copy_to_user in wireless/ray_cs ioctl
From: Daniele Bellucci <bellucda@tiscali.it>
Fix an unchecked copy_to_user in ray_cs ioctl.
Diffstat (limited to 'drivers/net')
| -rw-r--r-- | drivers/net/wireless/ray_cs.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/drivers/net/wireless/ray_cs.c b/drivers/net/wireless/ray_cs.c index 83630b0e59b5..a73dcffa4957 100644 --- a/drivers/net/wireless/ray_cs.c +++ b/drivers/net/wireless/ray_cs.c @@ -25,6 +25,8 @@ * - reorganize kmallocs in ray_attach, checking all for failure * and releasing the previous allocations if one fails * + * Daniele Bellucci <bellucda@tiscali.it> - 07/10/2003 + * - Audit copy_to_user in ioctl(SIOCGIWESSID) * =============================================================================*/ @@ -1315,7 +1317,8 @@ static int ray_dev_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd) /* Push it out ! */ wrq->u.data.length = strlen(essid) + 1; wrq->u.data.flags = 1; /* active */ - copy_to_user(wrq->u.data.pointer, essid, sizeof(essid)); + if (copy_to_user(wrq->u.data.pointer, essid, sizeof(essid))) + err = -EFAULT; } break; |