On Tue, 9 Oct 2012 14:50:46 -0300, Rodrigo Vivi rodrigo.vivi@gmail.com wrote:
When cmd isn't IOC_IN | IOC_OUT a null "kdata" goes to "memset", which dereferences it.
usize should be 0 in that case, since the ioctl is neither copying data in or out, for example I915_GEM_THROTTLE. To be on the safe side: if (IOC_IN | IOC_OUT) { /* blah */ } else usize = 0; -Chris