Commit e1e33086 authored by Randy Dunlap's avatar Randy Dunlap Committed by Steve French

[PATCH] janitor: unchecked copy/put_user in umsdos ioctl

author:  Daniele Bellucci <bellucda@tiscali.it>

Fix a series of unchecked copy/put_user()s in umsdos ioctl.
parent 4fa73e69
...@@ -4,6 +4,10 @@ ...@@ -4,6 +4,10 @@
* Written 1993 by Jacques Gelinas * Written 1993 by Jacques Gelinas
* *
* Extended MS-DOS ioctl directory handling functions * Extended MS-DOS ioctl directory handling functions
*
* Changes:
* 11/07/2003 Daniele Bellucci <bellucda@tiscali.it>
* - audit copy_to_user/put_user in umsdos_ioctl_fill.
*/ */
#include <asm/uaccess.h> #include <asm/uaccess.h>
...@@ -36,11 +40,12 @@ static int umsdos_ioctl_fill ( ...@@ -36,11 +40,12 @@ static int umsdos_ioctl_fill (
struct UMSDOS_DIR_ONCE *d = (struct UMSDOS_DIR_ONCE *) buf; struct UMSDOS_DIR_ONCE *d = (struct UMSDOS_DIR_ONCE *) buf;
if (d->count == 0) { if (d->count == 0) {
copy_to_user (d->ent->d_name, name, name_len); if (copy_to_user (d->ent->d_name, name, name_len) ||
put_user ('\0', d->ent->d_name + name_len); put_user ('\0', d->ent->d_name + name_len) ||
put_user (name_len, &d->ent->d_reclen); put_user (name_len, &d->ent->d_reclen) ||
put_user (ino, &d->ent->d_ino); put_user (ino, &d->ent->d_ino) ||
put_user (offset, &d->ent->d_off); put_user (offset, &d->ent->d_off))
return -EFAULT;
d->count = 1; d->count = 1;
ret = 0; ret = 0;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment