From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755527AbbLLCtB (ORCPT ); Fri, 11 Dec 2015 21:49:01 -0500 Received: from p3plsmtps2ded04.prod.phx3.secureserver.net ([208.109.80.198]:42067 "EHLO p3plsmtps2ded04.prod.phx3.secureserver.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754619AbbLLCsW (ORCPT ); Fri, 11 Dec 2015 21:48:22 -0500 x-originating-ip: 72.167.245.219 From: "K. Y. Srinivasan" To: gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, devel@linuxdriverproject.org, olaf@aepfle.de, apw@canonical.com, vkuznets@redhat.com, jasowang@redhat.com Cc: "K. Y. Srinivasan" Subject: [PATCH RESEND 06/27] Drivers: hv: utils: use memdup_user in hvt_op_write Date: Fri, 11 Dec 2015 20:21:26 -0800 Message-Id: <1449894107-3389-6-git-send-email-kys@microsoft.com> X-Mailer: git-send-email 1.7.4.1 In-Reply-To: <1449894107-3389-1-git-send-email-kys@microsoft.com> References: <1449894084-3348-1-git-send-email-kys@microsoft.com> <1449894107-3389-1-git-send-email-kys@microsoft.com> X-CMAE-Envelope: MS4wfKa+fwgbVy9sHerCOEjV7GcMULXJQYXJjMiXgH5vhEWq/t/w5LlGKPCB0CX8XKmEGONfTeR/T96zq6eGPYKdpwR1rfykRtL8WKYSW2sKNT370K/lLQfO GBimqldavtnJCLzKYhhe3FPrlzxwfoXaAhKcQeRjTF35/qt3VyZDut7FBepMBnETh15tAUg5jjwb8yu+d+inzY6/05TEda0Hkm3ibcxsYUaCh6BiXJAcBaPn Z5w4XmixqVu5NUHAqHlbza9zUL9MO/ZhuPftZGBECPTdNE7/930qTU24i+amDvOwZwNC7sVMgkqtL+4zDzDtTSblpEm/TJOS7cSSSeC/619DQVksGzUybg18 8c3MLRpTklP3WbQuSLsVF3IRJRBzItRF6nTrYkoNyxUhbcbSjwCkHccfUDMd+vwXrLlloa59 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Olaf Hering Use memdup_user to handle OOM. Fixes: 14b50f80c32d ('Drivers: hv: util: introduce hv_utils_transport abstraction') Signed-off-by: Olaf Hering Signed-off-by: K. Y. Srinivasan --- drivers/hv/hv_utils_transport.c | 9 ++++----- 1 files changed, 4 insertions(+), 5 deletions(-) diff --git a/drivers/hv/hv_utils_transport.c b/drivers/hv/hv_utils_transport.c index 1505ee6..24b2766 100644 --- a/drivers/hv/hv_utils_transport.c +++ b/drivers/hv/hv_utils_transport.c @@ -80,11 +80,10 @@ static ssize_t hvt_op_write(struct file *file, const char __user *buf, hvt = container_of(file->f_op, struct hvutil_transport, fops); - inmsg = kzalloc(count, GFP_KERNEL); - if (copy_from_user(inmsg, buf, count)) { - kfree(inmsg); - return -EFAULT; - } + inmsg = memdup_user(buf, count); + if (IS_ERR(inmsg)) + return PTR_ERR(inmsg); + if (hvt->on_msg(inmsg, count)) return -EFAULT; kfree(inmsg); -- 1.7.4.1