Hi,

It is a bug in the TUN/TAP-driver for Linux 2.4.0-test9.
This patch call skb_put() with the right variable in tun_get_user().


Regards
   / andesr

-- 
Anders Nystrom                  Snigel-post:
Telefon: 070-73 58 369          Karhusgrand 5:708
Epost: [EMAIL PROTECTED]      977 54  LULEA

--- linux/drivers/net/tun.c.orig        Sat Sep 23 00:19:30 2000
+++ linux/drivers/net/tun.c     Mon Oct 23 19:21:27 2000
@@ -214,7 +214,7 @@
        }
 
        skb_reserve(skb, 2);
-       copy_from_user(skb_put(skb, count), ptr, len); 
+       copy_from_user(skb_put(skb, len), ptr, len); 
 
        skb->dev = &tun->dev;
        switch (tun->flags & TUN_TYPE_MASK) {
--- linux/drivers/net/tun.c.orig        Sat Sep 23 00:19:30 2000
+++ linux/drivers/net/tun.c     Mon Oct 23 19:21:27 2000
@@ -214,7 +214,7 @@
        }
 
        skb_reserve(skb, 2);
-       copy_from_user(skb_put(skb, count), ptr, len); 
+       copy_from_user(skb_put(skb, len), ptr, len); 
 
        skb->dev = &tun->dev;
        switch (tun->flags & TUN_TYPE_MASK) {

Reply via email to