diff options
Diffstat (limited to 'drivers/input/evdev.c')
| -rw-r--r-- | drivers/input/evdev.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/input/evdev.c b/drivers/input/evdev.c index 19c14c4beb44..3738d173f9a6 100644 --- a/drivers/input/evdev.c +++ b/drivers/input/evdev.c | |||
| @@ -322,7 +322,7 @@ static long evdev_ioctl(struct file *file, unsigned int cmd, unsigned long arg) | |||
| 322 | if (t < 0 || t >= dev->keycodemax || !dev->keycodesize) return -EINVAL; | 322 | if (t < 0 || t >= dev->keycodemax || !dev->keycodesize) return -EINVAL; |
| 323 | if (get_user(v, ip + 1)) return -EFAULT; | 323 | if (get_user(v, ip + 1)) return -EFAULT; |
| 324 | if (v < 0 || v > KEY_MAX) return -EINVAL; | 324 | if (v < 0 || v > KEY_MAX) return -EINVAL; |
| 325 | if (v >> (dev->keycodesize * 8)) return -EINVAL; | 325 | if (dev->keycodesize < sizeof(v) && (v >> (dev->keycodesize * 8))) return -EINVAL; |
| 326 | u = SET_INPUT_KEYCODE(dev, t, v); | 326 | u = SET_INPUT_KEYCODE(dev, t, v); |
| 327 | clear_bit(u, dev->keybit); | 327 | clear_bit(u, dev->keybit); |
| 328 | set_bit(v, dev->keybit); | 328 | set_bit(v, dev->keybit); |
| @@ -509,7 +509,7 @@ do { \ | |||
| 509 | int len = NBITS_COMPAT((max)) * sizeof(compat_long_t); \ | 509 | int len = NBITS_COMPAT((max)) * sizeof(compat_long_t); \ |
| 510 | if (len > _IOC_SIZE(cmd)) len = _IOC_SIZE(cmd); \ | 510 | if (len > _IOC_SIZE(cmd)) len = _IOC_SIZE(cmd); \ |
| 511 | for (i = 0; i < len / sizeof(compat_long_t); i++) \ | 511 | for (i = 0; i < len / sizeof(compat_long_t); i++) \ |
| 512 | if (copy_to_user((compat_long_t*) p + i, \ | 512 | if (copy_to_user((compat_long_t __user *) p + i, \ |
| 513 | (compat_long_t*) (bit) + i + 1 - ((i % 2) << 1), \ | 513 | (compat_long_t*) (bit) + i + 1 - ((i % 2) << 1), \ |
| 514 | sizeof(compat_long_t))) \ | 514 | sizeof(compat_long_t))) \ |
| 515 | return -EFAULT; \ | 515 | return -EFAULT; \ |
