Attachment #48046 for bug #77094

Lines 1771-1776 Link Here

(-)linux-2.4.28/drivers/char/moxa.c (-2 / +2 lines)
1771	return -EFAULT;	1771	return -EFAULT;
1772	if(dltmp.cardno < 0 \|\| dltmp.cardno >= MAX_BOARDS)	1772	if(dltmp.cardno < 0 \|\| dltmp.cardno >= MAX_BOARDS)
1773	return -EINVAL;	1773	return -EINVAL;
		1774	if(dltmp.len < 0 \|\| dltmp.len > sizeof(moxaBuff))
		1775	return -EINVAL;
1774		1776
1775	switch(cmd)	1777	switch(cmd)
1776	{	1778	{
Lines 2927-2934 Link Here
2927	unsigned long baseAddr;	2929	unsigned long baseAddr;
2928	int i;	2930	int i;
2929		2931
2930	if(len > sizeof(moxaBuff))
2931	return -EINVAL;
2932	if(copy_from_user(moxaBuff, tmp, len))	2932	if(copy_from_user(moxaBuff, tmp, len))
2933	return -EFAULT;	2933	return -EFAULT;
2934	baseAddr = moxaBaseAddr[cardno];	2934	baseAddr = moxaBaseAddr[cardno];

Lines 1787-1793 Link Here

(-)linux-2.4.28/drivers/char/random.c (-1 / +1 lines)
1787	void oldval, size_t oldlenp,	1787	void oldval, size_t oldlenp,
1788	void newval, size_t newlen, void *context)	1788	void newval, size_t newlen, void *context)
1789	{	1789	{
1790	int len;	1790	size_t len;
1791		1791
1792	sysctl_poolsize = random_state->poolinfo.POOLBYTES;	1792	sysctl_poolsize = random_state->poolinfo.POOLBYTES;
1793		1793

Return to bug 77094