|
@@ -723,8 +723,6 @@ static ssize_t adb_read(struct file *file, char __user *buf,
|
|
|
return -EINVAL;
|
|
|
if (count > sizeof(req->reply))
|
|
|
count = sizeof(req->reply);
|
|
|
- if (!access_ok(VERIFY_WRITE, buf, count))
|
|
|
- return -EFAULT;
|
|
|
|
|
|
req = NULL;
|
|
|
spin_lock_irqsave(&state->lock, flags);
|
|
@@ -781,8 +779,6 @@ static ssize_t adb_write(struct file *file, const char __user *buf,
|
|
|
return -EINVAL;
|
|
|
if (adb_controller == NULL)
|
|
|
return -ENXIO;
|
|
|
- if (!access_ok(VERIFY_READ, buf, count))
|
|
|
- return -EFAULT;
|
|
|
|
|
|
req = kmalloc(sizeof(struct adb_request),
|
|
|
GFP_KERNEL);
|