From: Dipankar Sarma <dipankar@in.ibm.com>

Use copy_to_user to copy mpu_synth_ioctl arg.



 25-akpm/sound/oss/mpu401.c |    5 ++++-
 1 files changed, 4 insertions(+), 1 deletion(-)

diff -puN sound/oss/mpu401.c~ds-08-mpu401-usercopy-fix sound/oss/mpu401.c
--- 25/sound/oss/mpu401.c~ds-08-mpu401-usercopy-fix	Tue Jun 10 14:57:34 2003
+++ 25-akpm/sound/oss/mpu401.c	Tue Jun 10 14:58:19 2003
@@ -792,7 +792,10 @@ static int mpu_synth_ioctl(int dev,
 	{
 
 		case SNDCTL_SYNTH_INFO:
-			memcpy((&((char *) arg)[0]), (char *) &mpu_synth_info[midi_dev], sizeof(struct synth_info));
+			if (copy_to_user((&((char *) arg)[0]),
+					(char *) &mpu_synth_info[midi_dev],
+					sizeof(struct synth_info)))
+				return -EFAULT;
 			return 0;
 
 		case SNDCTL_SYNTH_MEMAVL:

_