If memdup_user() fails then it will return the error code in ERR_PTR. We
were checking it with IS_ERR but then again trying to free it on the
error path.

Signed-off-by: Sudip Mukherjee <su...@vectorindia.org>
---
 drivers/staging/wilc1000/linux_wlan.c | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/drivers/staging/wilc1000/linux_wlan.c 
b/drivers/staging/wilc1000/linux_wlan.c
index c90c459..020ed03 100644
--- a/drivers/staging/wilc1000/linux_wlan.c
+++ b/drivers/staging/wilc1000/linux_wlan.c
@@ -2116,10 +2116,8 @@ int mac_ioctl(struct net_device *ndev, struct ifreq 
*req, int cmd)
                if (size && wrq->u.data.pointer) {
 
                        buff = memdup_user(wrq->u.data.pointer, 
wrq->u.data.length);
-                       if (IS_ERR(buff)) {
-                               s32Error = PTR_ERR(buff);
-                               goto done;
-                       }
+                       if (IS_ERR(buff))
+                               return PTR_ERR(buff);
 
                        if (strncasecmp(buff, "RSSI", length) == 0) {
 
-- 
1.9.1

_______________________________________________
devel mailing list
de...@linuxdriverproject.org
http://driverdev.linuxdriverproject.org/mailman/listinfo/driverdev-devel

Reply via email to