diff mbox

[3/4] drivers/hid: Eliminate use after free

Message ID Pine.LNX.4.64.1005151146120.15566@ask.diku.dk (mailing list archive)
State Accepted
Commit aeacb6fd30c800e8229905eac7023777a472d772
Headers show

Commit Message

Julia Lawall May 15, 2010, 9:46 a.m. UTC
None
diff mbox

Patch

diff --git a/drivers/hid/hid-picolcd.c b/drivers/hid/hid-picolcd.c
index 95253b3..7aabf65 100644
--- a/drivers/hid/hid-picolcd.c
+++ b/drivers/hid/hid-picolcd.c
@@ -1616,7 +1616,7 @@  static ssize_t _picolcd_flash_write(struct picolcd_data *data, int report_id,
 		raw_data[len_off] = s > 32 ? 32 : s;
 		if (copy_from_user(raw_data+len_off+1, u, raw_data[len_off])) {
 			err = -EFAULT;
-			goto skip;
+			break;
 		}
 		resp = picolcd_send_and_wait(data->hdev, report_id, raw_data,
 				len_off+1+raw_data[len_off]);