| commit | 19dcf415184e1ef6d9641d76e3248d3b2677b3df | [log] [tgz] |
|---|---|---|
| author | Ian Abbott <abbotti@mev.co.uk> | Tue Sep 18 19:46:58 2012 +0100 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Sun Oct 07 08:32:24 2012 -0700 |
| tree | 288b3c87cb1d940642988fe5d6c491f0ddb4383a | |
| parent | 4483c56613f9ca0cff15d231975b240d3f3e8a10 [diff] |
staging: comedi: don't dereference user memory for INSN_INTTRIG commit 5d06e3df280bd230e2eadc16372e62818c63e894 upstream. `parse_insn()` is dereferencing the user-space pointer `insn->data` directly when handling the `INSN_INTTRIG` comedi instruction. It shouldn't be using `insn->data` at all; it should be using the separate `data` pointer passed to the function. Fix it. Signed-off-by: Ian Abbott <abbotti@mev.co.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>