]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
comedi: lift copy_from_user() into callers of __comedi_get_user_cmd()
authorAl Viro <viro@zeniv.linux.org.uk>
Sun, 26 Apr 2020 12:46:04 +0000 (08:46 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Fri, 29 May 2020 14:06:00 +0000 (10:06 -0400)
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
drivers/staging/comedi/comedi_fops.c

index 10ab24019fa524d767d0950efe98fae50ed91bb0..c136cb2f676a33fc102182a6c98fac848cedbdeb 100644 (file)
@@ -1649,17 +1649,11 @@ error:
 }
 
 static int __comedi_get_user_cmd(struct comedi_device *dev,
-                                struct comedi_cmd __user *arg,
                                 struct comedi_cmd *cmd)
 {
        struct comedi_subdevice *s;
 
        lockdep_assert_held(&dev->mutex);
-       if (copy_from_user(cmd, arg, sizeof(*cmd))) {
-               dev_dbg(dev->class_dev, "bad cmd address\n");
-               return -EFAULT;
-       }
-
        if (cmd->subdev >= dev->n_subdevices) {
                dev_dbg(dev->class_dev, "%d no such subdevice\n", cmd->subdev);
                return -ENODEV;
@@ -1757,8 +1751,13 @@ static int do_cmd_ioctl(struct comedi_device *dev,
 
        lockdep_assert_held(&dev->mutex);
 
+       if (copy_from_user(&cmd, arg, sizeof(cmd))) {
+               dev_dbg(dev->class_dev, "bad cmd address\n");
+               return -EFAULT;
+       }
+
        /* get the user's cmd and do some simple validation */
-       ret = __comedi_get_user_cmd(dev, arg, &cmd);
+       ret = __comedi_get_user_cmd(dev, &cmd);
        if (ret)
                return ret;
 
@@ -1866,8 +1865,13 @@ static int do_cmdtest_ioctl(struct comedi_device *dev,
 
        lockdep_assert_held(&dev->mutex);
 
+       if (copy_from_user(&cmd, arg, sizeof(cmd))) {
+               dev_dbg(dev->class_dev, "bad cmd address\n");
+               return -EFAULT;
+       }
+
        /* get the user's cmd and do some simple validation */
-       ret = __comedi_get_user_cmd(dev, arg, &cmd);
+       ret = __comedi_get_user_cmd(dev, &cmd);
        if (ret)
                return ret;