Index: sys/compat/freebsd32/freebsd32_misc.c =================================================================== diff -u -N -r9de056024800a90036f8acb6bab6b2f9db72b382 -rc1e0d9ee577ee68702d503677837f61bbb957de0 --- sys/compat/freebsd32/freebsd32_misc.c (.../freebsd32_misc.c) (revision 9de056024800a90036f8acb6bab6b2f9db72b382) +++ sys/compat/freebsd32/freebsd32_misc.c (.../freebsd32_misc.c) (revision c1e0d9ee577ee68702d503677837f61bbb957de0) @@ -2337,7 +2337,7 @@ { struct timespec32 rmt32, rqt32; struct timespec rmt, rqt; - int error; + int error, error2; error = copyin(ua_rqtp, &rqt32, sizeof(rqt32)); if (error) @@ -2346,18 +2346,13 @@ CP(rqt32, rqt, tv_sec); CP(rqt32, rqt, tv_nsec); - if (ua_rmtp != NULL && (flags & TIMER_ABSTIME) == 0 && - !useracc(ua_rmtp, sizeof(rmt32), VM_PROT_WRITE)) - return (EFAULT); error = kern_clock_nanosleep(td, clock_id, flags, &rqt, &rmt); if (error == EINTR && ua_rmtp != NULL && (flags & TIMER_ABSTIME) == 0) { - int error2; - CP(rmt, rmt32, tv_sec); CP(rmt, rmt32, tv_nsec); error2 = copyout(&rmt32, ua_rmtp, sizeof(rmt32)); - if (error2) + if (error2 != 0) error = error2; } return (error); Index: sys/kern/kern_time.c =================================================================== diff -u -N -r1691c07ff4f27b97220a5d65e217341e477f4014 -rc1e0d9ee577ee68702d503677837f61bbb957de0 --- sys/kern/kern_time.c (.../kern_time.c) (revision 1691c07ff4f27b97220a5d65e217341e477f4014) +++ sys/kern/kern_time.c (.../kern_time.c) (revision c1e0d9ee577ee68702d503677837f61bbb957de0) @@ -613,20 +613,15 @@ const struct timespec *ua_rqtp, struct timespec *ua_rmtp) { struct timespec rmt, rqt; - int error; + int error, error2; error = copyin(ua_rqtp, &rqt, sizeof(rqt)); if (error) return (error); - if (ua_rmtp != NULL && (flags & TIMER_ABSTIME) == 0 && - !useracc(ua_rmtp, sizeof(rmt), VM_PROT_WRITE)) - return (EFAULT); error = kern_clock_nanosleep(td, clock_id, flags, &rqt, &rmt); if (error == EINTR && ua_rmtp != NULL && (flags & TIMER_ABSTIME) == 0) { - int error2; - error2 = copyout(&rmt, ua_rmtp, sizeof(rmt)); - if (error2) + if (error2 != 0) error = error2; } return (error);