diff options
author | Dan Carpenter <error27@gmail.com> | 2010-10-19 07:56:24 +0200 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@suse.de> | 2010-11-09 13:30:48 -0800 |
commit | 3b97eed201376db6c4487fc846022eb4ffa7e1f9 (patch) | |
tree | aaa0ad36af41e9a25562a8e08793265a9c304390 /drivers/staging/sbe-2t3e3/ctrl.h | |
parent | ea07a9f2557b8ea99a0cdd778a5d94a7495bb049 (diff) | |
download | linux-3b97eed201376db6c4487fc846022eb4ffa7e1f9.tar.gz linux-3b97eed201376db6c4487fc846022eb4ffa7e1f9.tar.bz2 linux-3b97eed201376db6c4487fc846022eb4ffa7e1f9.zip |
Staging: sst: dereferencing user pointers
This code dereferences user supplied pointers directly instead of doing
a copy_from_user(). Some kernel configs put user and kernel memory in
different address spaces so this code isn't portable. Also the user
memory could be swapped out or in this case the pointer could just be
NULL leading to an oops.
Another thing is that it makes permission tests like this sort of
meaningless.
if (minor == STREAM_MODULE && rec_mute->stream_id == 0) {
retval = -EPERM;
break;
}
The user could set stream_id to 1 for the test and then change it later.
Signed-off-by: Dan Carpenter <error27@gmail.com>
Acked-by: Vinod Koul <vinod.koul@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/staging/sbe-2t3e3/ctrl.h')
0 files changed, 0 insertions, 0 deletions