Hi Chas,

	Patch against 2.6-test5.

	If copy_from_user returns != 0, it means the the regs structure wasn't 
filled correctly, and since its fields are used to determine which ioctl 
the user is requesting the kernel could oops.

	And as long as we're covering the subject, the patch also audits 
copy_to_user on the same function to check a possible failure to copy 
the result back to userspace.

	These bugs were found by smatch.

	Please consider applying.

	Cheers,

Felipe
-- 
It's most certainly GNU/Linux, not Linux. Read more at
http://www.gnu.org/gnu/why-gnu-linux.html