leandrof/linux
1
0
Fork 0
forked from Minki/linux
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[PATCH] m68k: amifb __user annotations

Browse Source 
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Cc: Roman Zippel <zippel@linux-m68k.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
This commit is contained in:
Al Viro 2006-01-12 01:06:31 -08:00 committed by Linus Torvalds
parent d85f6891aa
commit 3728d254de
1 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
drivers/video/amifb.c
View File

@ -1166,8 +1166,8 @@ static void ami_update_display(void);
static void ami_init_display(void); static void ami_init_display(void);
static void ami_do_blank(void); static void ami_do_blank(void);
static int ami_get_fix_cursorinfo(struct fb_fix_cursorinfo *fix); static int ami_get_fix_cursorinfo(struct fb_fix_cursorinfo *fix);
static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data); static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char __user *data);
static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data); static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char __user *data);
static int ami_get_cursorstate(struct fb_cursorstate *state); static int ami_get_cursorstate(struct fb_cursorstate *state);
static int ami_set_cursorstate(struct fb_cursorstate *state); static int ami_set_cursorstate(struct fb_cursorstate *state);
static void ami_set_sprite(void); static void ami_set_sprite(void);
@ -2181,6 +2181,7 @@ static int amifb_ioctl(struct inode *inode, struct file *file,
struct fb_var_cursorinfo var; struct fb_var_cursorinfo var;
struct fb_cursorstate state; struct fb_cursorstate state;
} crsr; } crsr;
void __user *argp = (void __user *)arg;
int i; int i;
switch (cmd) { switch (cmd) {
@ -2188,33 +2189,32 @@ static int amifb_ioctl(struct inode *inode, struct file *file,
i = ami_get_fix_cursorinfo(&crsr.fix); i = ami_get_fix_cursorinfo(&crsr.fix);
if (i) if (i)
return i; return i;
return copy_to_user((void *)arg, &crsr.fix, return copy_to_user(argp, &crsr.fix,
sizeof(crsr.fix)) ? -EFAULT : 0; sizeof(crsr.fix)) ? -EFAULT : 0;
case FBIOGET_VCURSORINFO: case FBIOGET_VCURSORINFO:
i = ami_get_var_cursorinfo(&crsr.var, i = ami_get_var_cursorinfo(&crsr.var,
((struct fb_var_cursorinfo *)arg)->data); ((struct fb_var_cursorinfo __user *)arg)->data);
if (i) if (i)
return i; return i;
return copy_to_user((void *)arg, &crsr.var, return copy_to_user(argp, &crsr.var,
sizeof(crsr.var)) ? -EFAULT : 0; sizeof(crsr.var)) ? -EFAULT : 0;
case FBIOPUT_VCURSORINFO: case FBIOPUT_VCURSORINFO:
if (copy_from_user(&crsr.var, (void *)arg, if (copy_from_user(&crsr.var, argp, sizeof(crsr.var)))
sizeof(crsr.var)))
return -EFAULT; return -EFAULT;
return ami_set_var_cursorinfo(&crsr.var, return ami_set_var_cursorinfo(&crsr.var,
((struct fb_var_cursorinfo *)arg)->data); ((struct fb_var_cursorinfo __user *)arg)->data);
case FBIOGET_CURSORSTATE: case FBIOGET_CURSORSTATE:
i = ami_get_cursorstate(&crsr.state); i = ami_get_cursorstate(&crsr.state);
if (i) if (i)
return i; return i;
return copy_to_user((void *)arg, &crsr.state, return copy_to_user(argp, &crsr.state,
sizeof(crsr.state)) ? -EFAULT : 0; sizeof(crsr.state)) ? -EFAULT : 0;
case FBIOPUT_CURSORSTATE: case FBIOPUT_CURSORSTATE:
if (copy_from_user(&crsr.state, (void *)arg, if (copy_from_user(&crsr.state, argp,
sizeof(crsr.state))) sizeof(crsr.state)))
return -EFAULT; return -EFAULT;
return ami_set_cursorstate(&crsr.state); return ami_set_cursorstate(&crsr.state);
@ -3327,7 +3327,7 @@ static int ami_get_fix_cursorinfo(struct fb_fix_cursorinfo *fix)
return 0; return 0;
} }
static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data) static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char __user *data)
{ {
struct amifb_par *par = &currentpar; struct amifb_par *par = &currentpar;
register u_short *lspr, *sspr; register u_short *lspr, *sspr;
@ -3349,14 +3349,14 @@ static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data)
var->yspot = par->crsr.spot_y; var->yspot = par->crsr.spot_y;
if (size > var->height*var->width) if (size > var->height*var->width)
return -ENAMETOOLONG; return -ENAMETOOLONG;
if (!access_ok(VERIFY_WRITE, (void *)data, size)) if (!access_ok(VERIFY_WRITE, data, size))
return -EFAULT; return -EFAULT;
delta = 1<<par->crsr.fmode; delta = 1<<par->crsr.fmode;
lspr = lofsprite + (delta<<1); lspr = lofsprite + (delta<<1);
if (par->bplcon0 & BPC0_LACE) if (par->bplcon0 & BPC0_LACE)
sspr = shfsprite + (delta<<1); sspr = shfsprite + (delta<<1);
else else
sspr = 0; sspr = NULL;
for (height = (short)var->height-1; height >= 0; height--) { for (height = (short)var->height-1; height >= 0; height--) {
bits = 0; words = delta; datawords = 0; bits = 0; words = delta; datawords = 0;
for (width = (short)var->width-1; width >= 0; width--) { for (width = (short)var->width-1; width >= 0; width--) {
@ -3402,7 +3402,7 @@ static int ami_get_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data)
return 0; return 0;
} }
static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data) static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char __user *data)
{ {
struct amifb_par *par = &currentpar; struct amifb_par *par = &currentpar;
register u_short *lspr, *sspr; register u_short *lspr, *sspr;
@ -3429,7 +3429,7 @@ static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data)
return -EINVAL; return -EINVAL;
if (!var->height) if (!var->height)
return -EINVAL; return -EINVAL;
if (!access_ok(VERIFY_READ, (void *)data, var->width*var->height)) if (!access_ok(VERIFY_READ, data, var->width*var->height))
return -EFAULT; return -EFAULT;
delta = 1<<fmode; delta = 1<<fmode;
lofsprite = shfsprite = (u_short *)spritememory; lofsprite = shfsprite = (u_short *)spritememory;
@ -3444,13 +3444,13 @@ static int ami_set_var_cursorinfo(struct fb_var_cursorinfo *var, u_char *data)
if (((var->height+2)<<fmode<<2) > SPRITEMEMSIZE) if (((var->height+2)<<fmode<<2) > SPRITEMEMSIZE)
return -EINVAL; return -EINVAL;
memset(lspr, 0, (var->height+2)<<fmode<<2); memset(lspr, 0, (var->height+2)<<fmode<<2);
sspr = 0; sspr = NULL;
} }
for (height = (short)var->height-1; height >= 0; height--) { for (height = (short)var->height-1; height >= 0; height--) {
bits = 16; words = delta; datawords = 0; bits = 16; words = delta; datawords = 0;
for (width = (short)var->width-1; width >= 0; width--) { for (width = (short)var->width-1; width >= 0; width--) {
unsigned long tdata = 0; unsigned long tdata = 0;
get_user(tdata, (char *)data); get_user(tdata, data);
data++; data++;
#ifdef __mc68000__ #ifdef __mc68000__
asm volatile ( asm volatile (