Merge tag 'rpmsg-v5.20-1' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc...

[linux-2.6-microblaze.git] / net / bridge / br_ioctl.c

diff --git a/net/bridge/br_ioctl.c b/net/bridge/br_ioctl.c
index 891cfcf..f213ed1 100644 (file)
--- a/net/bridge/br_ioctl.c
+++ b/net/bridge/br_ioctl.c
@@ -8,6 +8,7 @@
  */
 
 #include <linux/capability.h>
+#include <linux/compat.h>
 #include <linux/kernel.h>
 #include <linux/if_bridge.h>
 #include <linux/netdevice.h>
@@ -102,37 +103,56 @@ static int add_del_if(struct net_bridge *br, int ifindex, int isadd)
        return ret;
 }
 
+#define BR_UARGS_MAX 4
+static int br_dev_read_uargs(unsigned long *args, size_t nr_args,
+                            void __user **argp, void __user *data)
+{
+       int ret;
+
+       if (nr_args < 2 || nr_args > BR_UARGS_MAX)
+               return -EINVAL;
+
+       if (in_compat_syscall()) {
+               unsigned int cargs[BR_UARGS_MAX];
+               int i;
+
+               ret = copy_from_user(cargs, data, nr_args * sizeof(*cargs));
+               if (ret)
+                       goto fault;
+
+               for (i = 0; i < nr_args; ++i)
+                       args[i] = cargs[i];
+
+               *argp = compat_ptr(args[1]);
+       } else {
+               ret = copy_from_user(args, data, nr_args * sizeof(*args));
+               if (ret)
+                       goto fault;
+               *argp = (void __user *)args[1];
+       }
+
+       return 0;
+fault:
+       return -EFAULT;
+}
+
 /*
  * Legacy ioctl's through SIOCDEVPRIVATE
  * This interface is deprecated because it was too difficult
  * to do the translation for 32/64bit ioctl compatibility.
  */
-int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user *data, int cmd)
+int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq,
+                         void __user *data, int cmd)
 {
        struct net_bridge *br = netdev_priv(dev);
        struct net_bridge_port *p = NULL;
        unsigned long args[4];
        void __user *argp;
-       int ret = -EOPNOTSUPP;
-
-       if (in_compat_syscall()) {
-               unsigned int cargs[4];
-
-               if (copy_from_user(cargs, data, sizeof(cargs)))
-                       return -EFAULT;
-
-               args[0] = cargs[0];
-               args[1] = cargs[1];
-               args[2] = cargs[2];
-               args[3] = cargs[3];
-
-               argp = compat_ptr(args[1]);
-       } else {
-               if (copy_from_user(args, data, sizeof(args)))
-                       return -EFAULT;
+       int ret;
 
-               argp = (void __user *)args[1];
-       }
+       ret = br_dev_read_uargs(args, ARRAY_SIZE(args), &argp, data);
+       if (ret)
+               return ret;
 
        switch (args[0]) {
        case BRCTL_ADD_IF:
@@ -301,6 +321,9 @@ int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user
 
        case BRCTL_GET_FDB_ENTRIES:
                return get_fdb_entries(br, argp, args[2], args[3]);
+
+       default:
+               ret = -EOPNOTSUPP;
        }
 
        if (!ret) {
@@ -313,12 +336,15 @@ int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user
        return ret;
 }
 
-static int old_deviceless(struct net *net, void __user *uarg)
+static int old_deviceless(struct net *net, void __user *data)
 {
        unsigned long args[3];
+       void __user *argp;
+       int ret;
 
-       if (copy_from_user(args, uarg, sizeof(args)))
-               return -EFAULT;
+       ret = br_dev_read_uargs(args, ARRAY_SIZE(args), &argp, data);
+       if (ret)
+               return ret;
 
        switch (args[0]) {
        case BRCTL_GET_VERSION:
@@ -337,7 +363,7 @@ static int old_deviceless(struct net *net, void __user *uarg)
 
                args[2] = get_bridge_ifindices(net, indices, args[2]);
 
-               ret = copy_to_user((void __user *)args[1], indices,
+               ret = copy_to_user(argp, indices,
                                   array_size(args[2], sizeof(int)))
                        ? -EFAULT : args[2];
 
@@ -353,7 +379,7 @@ static int old_deviceless(struct net *net, void __user *uarg)
                if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
                        return -EPERM;
 
-               if (copy_from_user(buf, (void __user *)args[1], IFNAMSIZ))
+               if (copy_from_user(buf, argp, IFNAMSIZ))
                        return -EFAULT;
 
                buf[IFNAMSIZ-1] = 0;