diff options
-rw-r--r-- | drivers/staging/comedi/comedi_fops.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/drivers/staging/comedi/comedi_fops.c b/drivers/staging/comedi/comedi_fops.c index ebdcecda3583..ed4853f194c4 100644 --- a/drivers/staging/comedi/comedi_fops.c +++ b/drivers/staging/comedi/comedi_fops.c | |||
@@ -670,6 +670,11 @@ static int do_insnlist_ioctl(struct comedi_device *dev, | |||
670 | goto error; | 670 | goto error; |
671 | } | 671 | } |
672 | 672 | ||
673 | if (sizeof(struct comedi_insn) * insnlist.n_insns < insnlist.n_insns) { | ||
674 | ret = -EINVAL; | ||
675 | goto error; | ||
676 | } | ||
677 | |||
673 | insns = | 678 | insns = |
674 | kmalloc(sizeof(struct comedi_insn) * insnlist.n_insns, GFP_KERNEL); | 679 | kmalloc(sizeof(struct comedi_insn) * insnlist.n_insns, GFP_KERNEL); |
675 | if (!insns) { | 680 | if (!insns) { |