diff options
| author | Chris Wright <chrisw@osdl.org> | 2004-08-01 06:57:26 -0400 |
|---|---|---|
| committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2004-08-01 06:57:26 -0400 |
| commit | ff2923acc600730c2d3145bcd43f188c6ea5baf3 (patch) | |
| tree | b3c63f8673ab4b9f5fa68caafe977a5e76c18824 /net | |
| parent | f9c235e6701d01908384bb1f0ba9b537557835f2 (diff) | |
| download | history-ff2923acc600730c2d3145bcd43f188c6ea5baf3.tar.gz | |
[PATCH] ethtool_get_regs copy right number of bytes to user
If regs.len is smaller than reglen it's possible to copy more bytes out
than the user asked for.
Signed-off-by: Chris Wright <chrisw@osdl.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/core/ethtool.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/core/ethtool.c b/net/core/ethtool.c index d996db79854ba2..866f29277ed131 100644 --- a/net/core/ethtool.c +++ b/net/core/ethtool.c @@ -157,7 +157,7 @@ static int ethtool_get_regs(struct net_device *dev, char __user *useraddr) if (copy_to_user(useraddr, ®s, sizeof(regs))) goto out; useraddr += offsetof(struct ethtool_regs, data); - if (copy_to_user(useraddr, regbuf, reglen)) + if (copy_to_user(useraddr, regbuf, regs.len)) goto out; ret = 0; |