From 4fa73e6977327b0edcc99f260355014fdd6ea722 Mon Sep 17 00:00:00 2001 From: Randy Dunlap Date: Fri, 18 Jul 2003 18:34:28 -0700 Subject: [PATCH] [PATCH] janitor: copy_to_user in wireless/ray_cs ioctl From: Daniele Bellucci Fix an unchecked copy_to_user in ray_cs ioctl. --- drivers/net/wireless/ray_cs.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/net/wireless/ray_cs.c b/drivers/net/wireless/ray_cs.c index 83630b0e59b5f..a73dcffa49571 100644 --- a/drivers/net/wireless/ray_cs.c +++ b/drivers/net/wireless/ray_cs.c @@ -25,6 +25,8 @@ * - reorganize kmallocs in ray_attach, checking all for failure * and releasing the previous allocations if one fails * + * Daniele Bellucci - 07/10/2003 + * - Audit copy_to_user in ioctl(SIOCGIWESSID) * =============================================================================*/ @@ -1315,7 +1317,8 @@ static int ray_dev_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd) /* Push it out ! */ wrq->u.data.length = strlen(essid) + 1; wrq->u.data.flags = 1; /* active */ - copy_to_user(wrq->u.data.pointer, essid, sizeof(essid)); + if (copy_to_user(wrq->u.data.pointer, essid, sizeof(essid))) + err = -EFAULT; } break; -- 2.53.0