Attachment #22356 for bug #57402

View | Details | Raw Unified | Return to bug 57402
Collapse All | Expand All

Lines 2163-2169 static ssize_t raw1394_write(struct file Link Here

(-)linux-2.6.5/drivers/ieee1394/raw1394.c (-1 / +2 lines)
2163	}	2163	}
2164	req->file_info = fi;	2164	req->file_info = fi;
2165		2165
2166	if (copy_from_user(&req->req, buffer, sizeof(struct raw1394_request))) {	2166	if (copy_from_user(&req->req, buffer, sizeof(struct raw1394_request))
		2167	\|\| (ssize_t)req->req->length < 0) {
2167	free_pending_request(req);	2168	free_pending_request(req);
2168	return -EFAULT;	2169	return -EFAULT;
2169	}	2170	}

Return to bug 57402