request_size is zero here so this condition is always false. Also we already handled negative values some lines earlier so it's not negative for that reason as well. It looks like this was introduced because we applied Dan Rosenberg's fix twice by mistake: b5b515445f4 "[SCSI] pmcraid: reject negative request size" 5f6279da376 "[SCSI] pmcraid: reject negative request size" Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx> --- I have tweaked the changelog slightly. This was originally sent on Fri, 16 Dec 2011. diff --git a/drivers/scsi/pmcraid.c b/drivers/scsi/pmcraid.c index ea8a0b4..d81a159 100644 --- a/drivers/scsi/pmcraid.c +++ b/drivers/scsi/pmcraid.c @@ -3870,9 +3870,6 @@ static long pmcraid_ioctl_passthrough( pmcraid_err("couldn't build passthrough ioadls\n"); goto out_free_buffer; } - } else if (request_size < 0) { - rc = -EINVAL; - goto out_free_buffer; } /* If data is being written into the device, copy the data from user -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html