Jann Horn 8e06ea4831 floppy: fix usercopy direction ...

commit 52f6f9d74f upstream.

As sparse points out, these two copy_from_user() should actually be
copy_to_user().

Fixes: 229b53c9bf ("take floppy compat ioctls to sodding floppy.c")
Cc: stable@vger.kernel.org
Acked-by: Alexander Popov <alex.popov@linux.com>
Reviewed-by: Mukesh Ojha <mojha@codeaurora.org>
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 14:31:19 +09:00

..

aoe

aoe: fix crash in page count manipulation

2016-11-12 08:27:07 -07:00

drbd

drbd: dynamically allocate shash descriptor

2023-05-15 14:17:14 +09:00

mtip32xx

Revert "mtip32xx: use runtime tag to initialize command header"

2018-04-08 12:13:01 +02:00

paride

cdrom: do not call check_disk_change() inside cdrom_open()

2018-05-30 07:50:47 +02:00

rsxx

block: convert to device_add_disk()

2016-06-27 12:26:08 -07:00

xen-blkback

xen/blkback: fix memory leaks

2023-05-15 14:21:32 +09:00

zram

zram: close udev startup race condition as default groups

2023-05-15 09:51:32 +09:00

amiflop.c

block: drop owner assignment from platform_drivers

2014-10-20 16:20:18 +02:00

ataflop.c

ataflop: fix error handling during setup

2023-05-15 09:19:19 +09:00

brd.c

block/mm: make bdev_ops->rw_page() take a bool for read/write

2016-08-07 14:41:02 -06:00

cciss_cmd.h

cciss: use new doorbell-bit-5 reset method

2011-05-06 08:23:55 -06:00

cciss_scsi.c

scsi: Do not set cmd_per_lun to 1 in the host template

2015-05-31 18:06:28 -07:00

cciss_scsi.h

cciss: add cciss_tape_cmds module paramter

2011-05-06 08:23:59 -06:00

cciss.c

block: convert to device_add_disk()

2016-06-27 12:26:08 -07:00

cciss.h

cciss: Adds simple mode functionality

2011-08-08 11:40:15 +02:00

cryptoloop.c

block: cryptoloop - Use new skcipher interface

2016-01-27 20:35:43 +08:00

DAC960.c

block: DAC960: print a hex number after a 0x prefix

2016-10-27 18:43:43 -07:00

DAC960.h

Fix DAC960 driver on machines which don't support 64-bit DMA

2007-09-11 17:21:19 -07:00

floppy.c

floppy: fix usercopy direction

2023-05-15 14:31:19 +09:00

hd.c

block: hd: remove deprecated IRQF_DISABLED

2014-10-01 08:16:07 -06:00

Kconfig

cpqarray: remove it from the kernel

2016-03-14 09:06:01 -06:00

loop.c

Revert "block/loop: Use global lock for ioctl() operation."

2023-05-15 12:35:57 +09:00

loop.h

Revert "block/loop: Use global lock for ioctl() operation."

2023-05-15 12:35:57 +09:00

Makefile

drivers:block: cpqarray clean up

2016-03-15 15:59:47 -07:00

mg_disk.c

mg_disk: fix error path in mg_probe()

2016-06-28 11:01:27 -06:00

nbd.c

nbd: Use set_blocksize() to set device blocksize

2023-05-15 11:01:54 +09:00

null_blk.c

Merge branch 'for-4.9/block-irq' of git://git.kernel.dk/linux-block

2016-10-09 17:29:33 -07:00

osdblk.c

block, drivers: add REQ_OP_FLUSH operation

2016-06-07 13:41:38 -06:00

pktcdvd.c

pktcdvd: Fix pkt_setup_dev() error path

2018-02-17 13:21:19 +01:00

ps3disk.c

block: convert to device_add_disk()

2016-06-27 12:26:08 -07:00

ps3vram.c

block: convert to device_add_disk()

2016-06-27 12:26:08 -07:00

rbd_types.h

rbd: support for exclusive-lock feature

2016-08-24 23:49:16 +02:00

rbd.c

rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set

2023-05-15 11:01:02 +09:00

skd_main.c

skd: Submit requests to firmware before triggering the doorbell

2017-09-27 14:39:21 +02:00

skd_s1120.h

skd: fix formatting in skd_s1120.h

2013-11-08 09:10:30 -07:00

smart1,2.h

fix typos 'comamnd' -> 'command' in comments

2011-02-02 11:31:21 +01:00

sunvdc.c

sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN

2023-05-15 11:22:30 +09:00

swim3.c

block/swim3: Fix -EBUSY error when re-opening device after unmount

2023-05-15 11:23:34 +09:00

swim_asm.S

m68k: mac - Add SWIM floppy support

2009-03-26 21:15:27 +01:00

swim.c

swim: fix cleanup on setup error

2023-05-15 09:19:21 +09:00

sx8.c

sx8: use real time for the command seconds

2015-12-23 08:42:59 -07:00

umem.c

block: rename bio bi_rw to bi_opf

2016-08-07 14:41:02 -06:00

umem.h

drivers/block/umem: trim trailing whitespace

2007-10-10 09:25:59 +02:00

virtio_blk.c

virtio-blk: limit number of hw queues by nr_cpu_ids

2023-05-15 12:39:45 +09:00

xen-blkfront.c

xen/blkfront: avoid NULL blkfront_info dereference on device removal

2023-05-15 09:20:29 +09:00

xsysace.c

xsysace: Fix error handling in ace_setup

2023-05-15 12:38:59 +09:00

z2ram.c

block: remove struct request buffer member

2014-04-15 14:03:02 -06:00