diff options
| author | Hans Verkuil <hverkuil@xs4all.nl> | 2019-05-27 05:31:13 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-07-26 09:14:02 +0200 |
| commit | ea904c9f6a33698c4e6223d6be4a4e99fd60eeb2 (patch) | |
| tree | c08c9148be95a6bf07057b1a614823bb32894c0c /drivers | |
| parent | a6dd4862b98f480e146f78192a62e9516dcec7fc (diff) | |
| download | linux-stable-ea904c9f6a33698c4e6223d6be4a4e99fd60eeb2.tar.gz linux-stable-ea904c9f6a33698c4e6223d6be4a4e99fd60eeb2.tar.bz2 linux-stable-ea904c9f6a33698c4e6223d6be4a4e99fd60eeb2.zip | |
media: mc-device.c: don't memset __user pointer contents
[ Upstream commit 518fa4e0e0da97ea2e17c95ab57647ce748a96e2 ]
You can't memset the contents of a __user pointer. Instead, call copy_to_user to
copy links.reserved (which is zeroed) to the user memory.
This fixes this sparse warning:
SPARSE:drivers/media/mc/mc-device.c drivers/media/mc/mc-device.c:521:16: warning: incorrect type in argument 1 (different address spaces)
Fixes: f49308878d720 ("media: media_device_enum_links32: clean a reserved field")
Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl>
Reviewed-by: Sakari Ailus <sakari.ailus@linux.intel.com>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/media/media-device.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/drivers/media/media-device.c b/drivers/media/media-device.c index ba344e6f0139..ed518b1f82e4 100644 --- a/drivers/media/media-device.c +++ b/drivers/media/media-device.c @@ -503,8 +503,9 @@ static long media_device_enum_links32(struct media_device *mdev, if (ret) return ret; - memset(ulinks->reserved, 0, sizeof(ulinks->reserved)); - + if (copy_to_user(ulinks->reserved, links.reserved, + sizeof(ulinks->reserved))) + return -EFAULT; return 0; } |