diff options
author | Zev Weiss <zevweiss@gmail.com> | 2008-09-01 05:02:12 -0700 |
---|---|---|
committer | David Woodhouse <David.Woodhouse@intel.com> | 2008-09-02 09:29:05 +0100 |
commit | b67c5f87c13f398ec3f4d6b455cb0bbeda8d7ac0 (patch) | |
tree | fc2ebe12c5b34439b9034742f957177111409cc7 /drivers/mfd/ucb1x00-core.c | |
parent | 02c0267a40c876a4d70f2000f21fe9ff89fb988e (diff) |
[MTD] mtdchar.c: Fix regression in MEMGETREGIONINFO ioctl()
The MEMGETREGIONINFO ioctl() in mtdchar.c was clobbering user memory by
overwriting more than intended, due the size of struct mtd_erase_region_info
changing in commit 0ecbc81adfcb9f15f86b05ff576b342ce81bbef8 ('Support
for auto locking flash on power up').
Fix avoids this by copying struct members one by one with put_user(), as there
is no longer a convenient struct to use the size of as the length argument to
copy_to_user().
Signed-off-by: Zev Weiss <zevweiss@gmail.com>
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Diffstat (limited to 'drivers/mfd/ucb1x00-core.c')
0 files changed, 0 insertions, 0 deletions