From 57300d252353b7b4209ca002c7611f29085edfd5 Mon Sep 17 00:00:00 2001
From: David Welch <welch@cwcom.net>
Date: Sun, 18 Nov 2001 01:28:50 +0000
Subject: [PATCH] Oops, used copy to caller instead of copy from caller

svn path=/trunk/; revision=2378
---
 reactos/ntoskrnl/ke/i386/exp.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/reactos/ntoskrnl/ke/i386/exp.c b/reactos/ntoskrnl/ke/i386/exp.c
index 72db0eb7859..c11942da677 100644
--- a/reactos/ntoskrnl/ke/i386/exp.c
+++ b/reactos/ntoskrnl/ke/i386/exp.c
@@ -456,14 +456,14 @@ KiUserTrapHandler(PKTRAP_FRAME Tf, ULONG ExceptionNr, PVOID Cr2)
   Frame = (PULONG)Tf->Ebp;
   while (Frame != NULL)
     {
-      Status = MmCopyToCaller(&ReturnAddress, &Frame[1], sizeof(ULONG));
+      Status = MmCopyFromCaller(&ReturnAddress, &Frame[1], sizeof(ULONG));
       if (!NT_SUCCESS(Status))
 	{
 	  DbgPrint("????????\n");
 	  break;
 	}
       print_address((PVOID)ReturnAddress);
-      Status = MmCopyToCaller(&NextFrame, &Frame[0], sizeof(ULONG));
+      Status = MmCopyFromCaller(&NextFrame, &Frame[0], sizeof(ULONG));
       if (!NT_SUCCESS(Status))
 	{
 	  DbgPrint("Frame is inaccessible.\n");