diff options
author | Peter Hurley <peter@hurleysoftware.com> | 2013-04-30 22:14:42 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2013-05-01 11:12:57 -0400 |
commit | 2b3097a294b6daaf390010de14ca50bfccbc6fb6 (patch) | |
tree | e6a90cce5782af1922bd7f53b1b13a2b24cb836b /ipc | |
parent | da085d4591a6fe11eac2e1f659f25b655e9f2e53 (diff) |
ipc: set EFAULT as default error in load_msg()
Signed-off-by: Peter Hurley <peter@hurleysoftware.com>
Acked-by: Stanislav Kinsbursky <skinsbursky@parallels.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'ipc')
-rw-r--r-- | ipc/msgutil.c | 10 |
1 files changed, 3 insertions, 7 deletions
diff --git a/ipc/msgutil.c b/ipc/msgutil.c index b79582d461a4..d33fbb2743bd 100644 --- a/ipc/msgutil.c +++ b/ipc/msgutil.c | |||
@@ -84,7 +84,7 @@ struct msg_msg *load_msg(const void __user *src, int len) | |||
84 | { | 84 | { |
85 | struct msg_msg *msg; | 85 | struct msg_msg *msg; |
86 | struct msg_msgseg *seg; | 86 | struct msg_msgseg *seg; |
87 | int err; | 87 | int err = -EFAULT; |
88 | int alen; | 88 | int alen; |
89 | 89 | ||
90 | msg = alloc_msg(len); | 90 | msg = alloc_msg(len); |
@@ -92,19 +92,15 @@ struct msg_msg *load_msg(const void __user *src, int len) | |||
92 | return ERR_PTR(-ENOMEM); | 92 | return ERR_PTR(-ENOMEM); |
93 | 93 | ||
94 | alen = min(len, DATALEN_MSG); | 94 | alen = min(len, DATALEN_MSG); |
95 | if (copy_from_user(msg + 1, src, alen)) { | 95 | if (copy_from_user(msg + 1, src, alen)) |
96 | err = -EFAULT; | ||
97 | goto out_err; | 96 | goto out_err; |
98 | } | ||
99 | 97 | ||
100 | for (seg = msg->next; seg != NULL; seg = seg->next) { | 98 | for (seg = msg->next; seg != NULL; seg = seg->next) { |
101 | len -= alen; | 99 | len -= alen; |
102 | src = (char __user *)src + alen; | 100 | src = (char __user *)src + alen; |
103 | alen = min(len, DATALEN_SEG); | 101 | alen = min(len, DATALEN_SEG); |
104 | if (copy_from_user(seg + 1, src, alen)) { | 102 | if (copy_from_user(seg + 1, src, alen)) |
105 | err = -EFAULT; | ||
106 | goto out_err; | 103 | goto out_err; |
107 | } | ||
108 | } | 104 | } |
109 | 105 | ||
110 | err = security_msg_msg_alloc(msg); | 106 | err = security_msg_msg_alloc(msg); |