struct uhid_event *ev;
unsigned long flags;
int ret;
- size_t len;
+ size_t uninitialized_var(len);
struct uhid_feature_answer_req *req;
if (!uhid->running)
goto try_again;
} else {
len = min(count, sizeof(**uhid->outq));
- if (copy_to_user(buffer, &uhid->outq[uhid->tail], len)) {
+ if (copy_to_user(buffer, uhid->outq[uhid->tail], len)) {
ret = -EFAULT;
} else {
kfree(uhid->outq[uhid->tail]);