---

yaml
---
r: 122599
b: refs/heads/master
c: c46f0a2
h: refs/heads/master
i:
  122597: dc74b9e
  122595: 7bbe24d
  122591: 92e2513
v: v3

[refs]

@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 047ce8f207b144eb9be094ce7427d6e11a687010
+refs/heads/master: c46f0a2d40f7ceb5fb696309bcd088ac75d0fe20

trunk/drivers/isdn/mISDN/timerdev.c

@@ -86,7 +86,7 @@ mISDN_close(struct inode *ino, struct file *filep)
 }
 
 static ssize_t
-mISDN_read(struct file *filep, char *buf, size_t count, loff_t *off)
+mISDN_read(struct file *filep, char __user *buf, size_t count, loff_t *off)
 {
 	struct mISDNtimerdev	*dev = filep->private_data;
 	struct mISDNtimer	*timer;
@@ -116,7 +116,7 @@ mISDN_read(struct file *filep, char *buf, size_t count, loff_t *off)
 		timer = (struct mISDNtimer *)dev->expired.next;
 		list_del(&timer->list);
 		spin_unlock_irqrestore(&dev->lock, flags);
-		if (put_user(timer->id, (int *)buf))
+		if (put_user(timer->id, (int __user *)buf))
 			ret = -EFAULT;
 		else
 			ret = sizeof(int);