Bugzilla – Attachment #22355: Proposed fix for 2.4 for bug #57402
}
req->file_info = fi;
if (copy_from_user(&req->req, buffer, sizeof(struct raw1394_request))) {
if (copy_from_user(&req->req, buffer, sizeof(struct raw1394_request))
|| (ssize_t)req->req->length < 0) {
free_pending_request(req);
return -EFAULT;