diff options
Diffstat (limited to 'ipc/msg.c')
| -rw-r--r-- | ipc/msg.c | 4 |
1 files changed, 2 insertions, 2 deletions
| @@ -590,13 +590,13 @@ static int copy_compat_msqid_from_user(struct msqid64_ds *out, void __user *buf, | |||
| 590 | { | 590 | { |
| 591 | memset(out, 0, sizeof(*out)); | 591 | memset(out, 0, sizeof(*out)); |
| 592 | if (version == IPC_64) { | 592 | if (version == IPC_64) { |
| 593 | struct compat_msqid64_ds *p = buf; | 593 | struct compat_msqid64_ds __user *p = buf; |
| 594 | if (get_compat_ipc64_perm(&out->msg_perm, &p->msg_perm)) | 594 | if (get_compat_ipc64_perm(&out->msg_perm, &p->msg_perm)) |
| 595 | return -EFAULT; | 595 | return -EFAULT; |
| 596 | if (get_user(out->msg_qbytes, &p->msg_qbytes)) | 596 | if (get_user(out->msg_qbytes, &p->msg_qbytes)) |
| 597 | return -EFAULT; | 597 | return -EFAULT; |
| 598 | } else { | 598 | } else { |
| 599 | struct compat_msqid_ds *p = buf; | 599 | struct compat_msqid_ds __user *p = buf; |
| 600 | if (get_compat_ipc_perm(&out->msg_perm, &p->msg_perm)) | 600 | if (get_compat_ipc_perm(&out->msg_perm, &p->msg_perm)) |
| 601 | return -EFAULT; | 601 | return -EFAULT; |
| 602 | if (get_user(out->msg_qbytes, &p->msg_qbytes)) | 602 | if (get_user(out->msg_qbytes, &p->msg_qbytes)) |
