i2c-dev: Use memdup_user
authorJulia Lawall <julia@diku.dk>
Wed, 11 Aug 2010 16:20:55 +0000 (18:20 +0200)
committerJean Delvare <khali@linux-fr.org>
Wed, 11 Aug 2010 16:20:55 +0000 (18:20 +0200)
commitf1c2e33c295de423db5740647bfaa5e2ad139192
tree82d2d788d711d012a816dbab4d62fb5bcd2a8e87
parent35a56c5b821c1a5ab904018f322a8e45afd116f0
i2c-dev: Use memdup_user

Use memdup_user when user data is immediately copied into the allocated
region.  Note that in the second case, the ++i is no longer necessary, as
the last value is already freed if needed by the call to memdup_user.

The semantic patch that makes this change is as follows:
(http://coccinelle.lip6.fr/)

// <smpl>
@@
expression from,to,size,flag;
position p;
identifier l1,l2;
@@

-  to = \(kmalloc@p\|kzalloc@p\)(size,flag);
+  to = memdup_user(from,size);
   if (
-      to==NULL
+      IS_ERR(to)
                 || ...) {
   <+... when != goto l1;
-  -ENOMEM
+  PTR_ERR(to)
   ...+>
   }
-  if (copy_from_user(to, from, size) != 0) {
-    <+... when != goto l2;
-    -EFAULT
-    ...+>
-  }
// </smpl>

Signed-off-by: Julia Lawall <julia@diku.dk>
Signed-off-by: Jean Delvare <khali@linux-fr.org>
drivers/i2c/i2c-dev.c