From: Dan Carpenter Date: Wed, 23 Jun 2010 17:03:01 +0000 (+0200) Subject: i915_gem: return -EFAULT if copy_to_user fails X-Git-Tag: firefly_0821_release~10186^2~934 X-Git-Url: http://demsky.eecs.uci.edu/git/?a=commitdiff_plain;h=079908f18d73154f76b8abb656d63bfeda0e201f;p=firefly-linux-kernel-4.4.55.git i915_gem: return -EFAULT if copy_to_user fails commit c877cdce93a44eea96f6cf7fc04be7d0372db2be upstream. copy_to_user() returns the number of bytes remaining to be copied and I'm pretty sure we want to return a negative error code here. Signed-off-by: Dan Carpenter Signed-off-by: Chris Wilson Signed-off-by: Greg Kroah-Hartman --- diff --git a/drivers/gpu/drm/i915/i915_gem.c b/drivers/gpu/drm/i915/i915_gem.c index 176a6dfbae0a..3ada62b8bd38 100644 --- a/drivers/gpu/drm/i915/i915_gem.c +++ b/drivers/gpu/drm/i915/i915_gem.c @@ -3667,6 +3667,7 @@ i915_gem_execbuffer(struct drm_device *dev, void *data, if (ret != 0) { DRM_ERROR("copy %d cliprects failed: %d\n", args->num_cliprects, ret); + ret = -EFAULT; goto pre_mutex_err; } }