The patch titled
usb: drivers/usb/core/devio.c dereferences a userspace pointer
has been added to the -mm tree. Its filename is
drivers-usb-core-devioc-dereference-userspace-pointer.patch
See http://www.zip.com.au/~akpm/linux/patches/stuff/added-to-mm.txt to find
out what to do about this
------------------------------------------------------
Subject: usb: drivers/usb/core/devio.c dereferences a userspace pointer
From: Philippe Retornaz <couriousous@xxxxxxxxxxxx>
See http://bugzilla.kernel.org/show_bug.cgi?id=6617.
This function dereference a __user pointer.
Signed-off-by: Philippe Retornaz <couriousous@xxxxxxxxxxxx>
Cc: Greg KH <greg@xxxxxxxxx>
Signed-off-by: Andrew Morton <akpm@xxxxxxxx>
---
drivers/usb/core/devio.c | 3 ++-
1 files changed, 2 insertions(+), 1 deletion(-)
diff -puN drivers/usb/core/devio.c~drivers-usb-core-devioc-dereference-userspace-pointer drivers/usb/core/devio.c
--- 25/drivers/usb/core/devio.c~drivers-usb-core-devioc-dereference-userspace-pointer Fri May 26 15:24:05 2006
+++ 25-akpm/drivers/usb/core/devio.c Fri May 26 15:26:44 2006
@@ -1078,7 +1078,8 @@ static int proc_submiturb(struct dev_sta
if (copy_from_user(&uurb, arg, sizeof(uurb)))
return -EFAULT;
- return proc_do_submiturb(ps, &uurb, (((struct usbdevfs_urb __user *)arg)->iso_frame_desc), arg);
+ return proc_do_submiturb(ps, &uurb,
+ (struct usbdevfs_urb __user *)uurb.iso_frame_desc, arg);
}
static int proc_unlinkurb(struct dev_state *ps, void __user *arg)
_
Patches currently in -mm which might be from couriousous@xxxxxxxxxxxx are
drivers-usb-core-devioc-dereference-userspace-pointer.patch
-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
