diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2011-03-29 11:36:52 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2011-03-29 11:36:52 -0700 |
| commit | 90f1e7481eebfd47e7dbf7c8c0cbfe31e025e031 (patch) | |
| tree | 5c968e99d6f3f9ef756b9d399b5f9e8669ed4f5a /drivers | |
| parent | d6ae0c63f09cc443aa14f8b966aa3e7b2229360b (diff) | |
| parent | e240ae4aad9c5c0da189cb6c956cca58abd428d0 (diff) | |
| download | linux-3.10-90f1e7481eebfd47e7dbf7c8c0cbfe31e025e031.tar.gz linux-3.10-90f1e7481eebfd47e7dbf7c8c0cbfe31e025e031.tar.bz2 linux-3.10-90f1e7481eebfd47e7dbf7c8c0cbfe31e025e031.zip | |
Merge branch 'stable/bug-fixes-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen
* 'stable/bug-fixes-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen:
xen: Use new irq_move functions
xen: Convert genirq namespace
xen: fix p2m section mismatches
xen/p2m: Allocate p2m tracking pages on override
xen-gntdev: unlock on error path in gntdev_mmap()
xen-gntdev: return -EFAULT on copy_to_user failure
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/xen/gntdev.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/drivers/xen/gntdev.c b/drivers/xen/gntdev.c index 017ce600fbc..b0f9e8fb005 100644 --- a/drivers/xen/gntdev.c +++ b/drivers/xen/gntdev.c @@ -273,7 +273,7 @@ static int __unmap_grant_pages(struct grant_map *map, int offset, int pages) map->vma->vm_start + map->notify.addr; err = copy_to_user(tmp, &err, 1); if (err) - return err; + return -EFAULT; map->notify.flags &= ~UNMAP_NOTIFY_CLEAR_BYTE; } else if (pgno >= offset && pgno < offset + pages) { uint8_t *tmp = kmap(map->pages[pgno]); @@ -662,7 +662,7 @@ static int gntdev_mmap(struct file *flip, struct vm_area_struct *vma) if (map->flags) { if ((vma->vm_flags & VM_WRITE) && (map->flags & GNTMAP_readonly)) - return -EINVAL; + goto out_unlock_put; } else { map->flags = GNTMAP_host_map; if (!(vma->vm_flags & VM_WRITE)) @@ -700,6 +700,8 @@ unlock_out: spin_unlock(&priv->lock); return err; +out_unlock_put: + spin_unlock(&priv->lock); out_put_map: if (use_ptemod) map->vma = NULL; |