diff options
| author | Thomas Gleixner <tglx@inhell4.(none)> | 2007-04-13 19:50:48 +0200 |
|---|---|---|
| committer | David Woodhouse <dwmw2@infradead.org> | 2007-04-17 13:40:00 -0400 |
| commit | 408b483d9cc2d839ecbc9134958c42814865081c (patch) | |
| tree | 7b96d7fdc47a9666080f2588e98872368e64bb9b /drivers/mtd/mtdchar.c | |
| parent | 1cf9827b6852d5d81130efbf2e777e50b7126d23 (diff) | |
| download | op-kernel-dev-408b483d9cc2d839ecbc9134958c42814865081c.zip op-kernel-dev-408b483d9cc2d839ecbc9134958c42814865081c.tar.gz | |
[MTD] Fix length comparison in MEMREADOOB
The ops.len member is not initialized, because it is unused for this
operation. The length check needs to use ops.ooblen instead
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Diffstat (limited to 'drivers/mtd/mtdchar.c')
| -rw-r--r-- | drivers/mtd/mtdchar.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/mtd/mtdchar.c b/drivers/mtd/mtdchar.c index 1592eac..8c86b80 100644 --- a/drivers/mtd/mtdchar.c +++ b/drivers/mtd/mtdchar.c @@ -553,7 +553,7 @@ static int mtd_ioctl(struct inode *inode, struct file *file, ops.datbuf = NULL; ops.mode = MTD_OOB_PLACE; - if (ops.ooboffs && ops.len > (mtd->oobsize - ops.ooboffs)) + if (ops.ooboffs && ops.ooblen > (mtd->oobsize - ops.ooboffs)) return -EINVAL; ops.oobbuf = kmalloc(buf.length, GFP_KERNEL); |
