Jann Horn f5282fe273 floppy: fix usercopy direction ...

commit 52f6f9d74f31078964ca1574f7bb612da7877ac8 upstream.

As sparse points out, these two copy_from_user() should actually be
copy_to_user().

Fixes: 229b53c9bf4e ("take floppy compat ioctls to sodding floppy.c")
Cc: stable@vger.kernel.org
Acked-by: Alexander Popov <alex.popov@linux.com>
Reviewed-by: Mukesh Ojha <mojha@codeaurora.org>
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-09-21 07:12:53 +02:00

..

aoe

Revert "block: remove artifical max_hw_sectors cap"

2015-08-18 13:21:13 -07:00

drbd

drbd: skip spurious timeout (ping-timeo) when failing promote

2019-02-20 10:13:11 +01:00

mtip32xx

Revert "mtip32xx: use runtime tag to initialize command header"

2018-04-08 11:52:02 +02:00

paride

cdrom: do not call check_disk_change() inside cdrom_open()

2018-05-30 07:49:13 +02:00

rsxx

block: change ->make_request_fn() and users to return a queue cookie

2015-11-07 10:40:46 -07:00

xen-blkback

xen-blkback: don't leak stack data via response ring

2017-11-21 09:21:17 +01:00

zram

zram: close udev startup race condition as default groups

2018-11-27 16:08:01 +01:00

amiflop.c

block: drop owner assignment from platform_drivers

2014-10-20 16:20:18 +02:00

ataflop.c

ataflop: fix error handling during setup

2018-11-21 09:27:31 +01:00

brd.c

brd: Fix discard request processing

2016-04-12 09:08:53 -07:00

cciss_cmd.h

…

cciss_scsi.c

scsi: Do not set cmd_per_lun to 1 in the host template

2015-05-31 18:06:28 -07:00

cciss_scsi.h

…

cciss.c

cciss: correct the non-resettable board list

2015-05-31 11:14:34 -07:00

cciss.h

…

cpqarray.c

genirq: Remove the deprecated 'IRQF_DISABLED' request_irq() flag entirely

2015-03-05 20:53:06 +01:00

cpqarray.h

…

cryptoloop.c

…

DAC960.c

block: use pci_zalloc_consistent

2014-08-08 15:57:28 -07:00

DAC960.h

…

floppy.c

floppy: fix usercopy direction

2019-09-21 07:12:53 +02:00

hd.c

block: hd: remove deprecated IRQF_DISABLED

2014-10-01 08:16:07 -06:00

ida_cmd.h

…

ida_ioctl.h

…

Kconfig

nvme: move to a new drivers/nvme/host directory

2015-10-09 10:40:37 -06:00

loop.c

Revert "block/loop: Use global lock for ioctl() operation."

2019-05-16 19:44:52 +02:00

loop.h

Revert "block/loop: Use global lock for ioctl() operation."

2019-05-16 19:44:52 +02:00

Makefile

nvme: move to a new drivers/nvme/host directory

2015-10-09 10:40:37 -06:00

mg_disk.c

block: drop owner assignment from platform_drivers

2014-10-20 16:20:18 +02:00

nbd.c

nbd: ratelimit error msgs after socket close

2016-05-11 11:21:10 +02:00

null_blk.c

null_blk: use async queue restart helper

2015-12-28 13:07:09 -07:00

osdblk.c

mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd

2015-11-06 17:50:42 -08:00

pktcdvd.c

pktcdvd: Fix pkt_setup_dev() error path

2018-02-16 20:09:47 +01:00

ps3disk.c

block: Kill bio_segments()/bi_vcnt usage

2013-11-23 22:33:51 -08:00

ps3vram.c

block: change ->make_request_fn() and users to return a queue cookie

2015-11-07 10:40:46 -07:00

rbd_types.h

…

rbd.c

rbd: set max_segments to USHRT_MAX

2018-01-17 09:35:30 +01:00

skd_main.c

skd: Submit requests to firmware before triggering the doorbell

2017-09-27 11:00:14 +02:00

skd_s1120.h

skd: fix formatting in skd_s1120.h

2013-11-08 09:10:30 -07:00

smart1,2.h

…

sunvdc.c

sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN

2019-02-20 10:13:06 +01:00

swim3.c

block/swim3: Fix -EBUSY error when re-opening device after unmount

2019-02-20 10:13:13 +01:00

swim_asm.S

…

swim.c

swim: fix cleanup on setup error

2018-11-21 09:27:31 +01:00

sx8.c

block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV

2015-05-05 13:40:03 -06:00

umem.c

block: change ->make_request_fn() and users to return a queue cookie

2015-11-07 10:40:46 -07:00

umem.h

…

virtio_blk.c

virtio_blk: fix panic in initialization error path

2017-08-11 09:08:58 -07:00

xen-blkfront.c

Merge tag 'for-linus-4.4-rc0-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2015-11-04 17:32:42 -08:00

xsysace.c

xsysace: Fix error handling in ace_setup

2019-05-16 19:45:02 +02:00

z2ram.c

block: remove struct request buffer member

2014-04-15 14:03:02 -06:00