diff options
Diffstat (limited to 'drivers/message/i2o/i2o_config.c')
-rw-r--r-- | drivers/message/i2o/i2o_config.c | 11 |
1 files changed, 3 insertions, 8 deletions
diff --git a/drivers/message/i2o/i2o_config.c b/drivers/message/i2o/i2o_config.c index d33693c13368..c4b117f5fb70 100644 --- a/drivers/message/i2o/i2o_config.c +++ b/drivers/message/i2o/i2o_config.c | |||
@@ -186,14 +186,9 @@ static int i2o_cfg_parms(unsigned long arg, unsigned int type) | |||
186 | if (!dev) | 186 | if (!dev) |
187 | return -ENXIO; | 187 | return -ENXIO; |
188 | 188 | ||
189 | ops = kmalloc(kcmd.oplen, GFP_KERNEL); | 189 | ops = memdup_user(kcmd.opbuf, kcmd.oplen); |
190 | if (!ops) | 190 | if (IS_ERR(ops)) |
191 | return -ENOMEM; | 191 | return PTR_ERR(ops); |
192 | |||
193 | if (copy_from_user(ops, kcmd.opbuf, kcmd.oplen)) { | ||
194 | kfree(ops); | ||
195 | return -EFAULT; | ||
196 | } | ||
197 | 192 | ||
198 | /* | 193 | /* |
199 | * It's possible to have a _very_ large table | 194 | * It's possible to have a _very_ large table |