提交 82e6bb03 编写于 作者: D Dan Carpenter 提交者: Greg Kroah-Hartman

Staging: silicom: use kstrtoint_from_user()

The main problem with the hand rolled code was that there weren't any
range checks so you could corrupt memory by writing too much data to
the proc file.
Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: NDaniel Cotey <puff65537@bansheeslibrary.com>
Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
上级 e4c536b7
......@@ -8071,20 +8071,13 @@ int
set_bypass_wd_pfs(struct file *file, const char *buffer,
unsigned long count, void *data)
{
char kbuf[256];
bpctl_dev_t *pbp_device_block = (bpctl_dev_t *) data;
int timeout;
int ret;
unsigned int timeout = 0;
char *timeout_ptr = kbuf;
if (copy_from_user(&kbuf, buffer, count)) {
return -1;
}
timeout_ptr = kbuf;
timeout = atoi(&timeout_ptr);
ret = kstrtoint_from_user(buffer, count, 10, &timeout);
if (ret)
return ret;
set_bypass_wd_fn(pbp_device_block, timeout);
return count;
......@@ -8712,18 +8705,13 @@ int
set_wd_autoreset_pfs(struct file *file, const char *buffer,
unsigned long count, void *data)
{
char kbuf[256];
bpctl_dev_t *pbp_device_block = (bpctl_dev_t *) data;
u32 timeout = 0;
char *timeout_ptr = kbuf;
if (copy_from_user(&kbuf, buffer, count)) {
return -1;
}
timeout_ptr = kbuf;
timeout = atoi(&timeout_ptr);
int timeout;
int ret;
ret = kstrtoint_from_user(buffer, count, 10, &timeout);
if (ret)
return ret;
set_wd_autoreset_fn(pbp_device_block, timeout);
return count;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册