diff options
| author |   Dan Carpenter <dan.carpenter@oracle.com> | 2012-11-12 11:07:24 +0000 |
|---|---|---|
| committer |   Dave Airlie <airlied@redhat.com> | 2012-11-16 09:53:01 +1000 |
| commit | 888155bbf63a5f955d7a45932ff05e848f715bf0 (patch) | |
| tree | 75646d6dd53b85ac6f37b46c6195e972d7113997 /drivers | |
| parent | Linux 3.7-rc5 (diff) | |
| download | linux-dev-888155bbf63a5f955d7a45932ff05e848f715bf0.tar.xz linux-dev-888155bbf63a5f955d7a45932ff05e848f715bf0.zip | |
vmwgfx: return an -EFAULT if copy_to_user() fails
copy_to_user() returns the number of bytes remaining to be copied, but
we want to return a negative error code here. I fixed a couple of these
last year, but I missed this one.
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c b/drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c index b07ca2e4d04b..7290811f89be 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c @@ -110,6 +110,8 @@ int vmw_get_cap_3d_ioctl(struct drm_device *dev, void *data, memcpy_fromio(bounce, &fifo_mem[SVGA_FIFO_3D_CAPS], size); ret = copy_to_user(buffer, bounce, size); + if (ret) + ret = -EFAULT; vfree(bounce); if (unlikely(ret != 0)) |