From: <ai...@ke...> - 2007-07-26 03:28:46
|
linux-core/drm_bo.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) New commits: diff-tree e2d00715cc1d3919aadd5066ef7355049f417bd2 (from f2528cbc965858c6a7a81d659f9d5f4da290b5ae) Author: Dave Airlie <ai...@re...> Date: Thu Jul 26 13:25:21 2007 +1000 drm: fix size argument for copy to/from user diff --git a/linux-core/drm_bo.c b/linux-core/drm_bo.c index 75d89e4..b47b657 100644 --- a/linux-core/drm_bo.c +++ b/linux-core/drm_bo.c @@ -1720,7 +1720,7 @@ int drm_bo_op_ioctl(struct drm_device *d if (next != 0) { curuserarg = (void __user *)next; if (copy_from_user(&curarg, curuserarg, - sizeof(arg)) != 0) + sizeof(curarg)) != 0) return -EFAULT; arg = &curarg; } @@ -1768,7 +1768,7 @@ int drm_bo_op_ioctl(struct drm_device *d arg->d.rep.bo_info = rep; if (arg != data) { if (copy_to_user(curuserarg, &curarg, - sizeof(arg)) != 0) + sizeof(curarg)) != 0) return -EFAULT; } } while (next != 0); |