git://ftp.safe.ca
/
safe
/
jmp
/
linux-2.6
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
| inline |
side by side
HID: picolcd: Eliminate use after free
[safe/jmp/linux-2.6]
/
drivers
/
hid
/
hid-picolcd.c
diff --git
a/drivers/hid/hid-picolcd.c
b/drivers/hid/hid-picolcd.c
index
95253b3
..
7aabf65
100644
(file)
--- a/
drivers/hid/hid-picolcd.c
+++ b/
drivers/hid/hid-picolcd.c
@@
-1616,7
+1616,7
@@
static ssize_t _picolcd_flash_write(struct picolcd_data *data, int report_id,
raw_data[len_off] = s > 32 ? 32 : s;
if (copy_from_user(raw_data+len_off+1, u, raw_data[len_off])) {
err = -EFAULT;
-
goto skip
;
+
break
;
}
resp = picolcd_send_and_wait(data->hdev, report_id, raw_data,
len_off+1+raw_data[len_off]);