posix_timer: Move copy_to_user(created_timer_id) down in timer_create()

According to Oleg Nesterov:
We can move copy_to_user(created_timer_id) down after
"if (timer_event_spec)" block too. (but before CLOCK_DISPATCH(),
of course).

Signed-off-by: Andrey Vagin <[e-mail]>
Cc: Oleg Nesterov <[e-mail]>
Cc: Pavel Emelyanov <[e-mail]>
Cc: Stanislaw Gruszka <[e-mail]>
Cc: Andrey Vagin <[e-mail]>
Signed-off-by: Andrew Morton <[e-mail]>
Signed-off-by: Thomas Gleixner <[e-mail]>

kernel/posix-timers.c

···
 	new_timer->it_clock = which_clock;
 	new_timer->it_overrun = -1;
 
-	if (copy_to_user(created_timer_id,
-			 &new_timer_id, sizeof (new_timer_id))) {
-		error = -EFAULT;
-		goto out;
-	}
 	if (timer_event_spec) {
 		if (copy_from_user(&event, timer_event_spec, sizeof (event))) {
 			error = -EFAULT;
···
 	new_timer->sigq->info.si_value = event.sigev_value;
 	new_timer->sigq->info.si_tid   = new_timer->it_id;
 	new_timer->sigq->info.si_code  = SI_TIMER;
+
+	if (copy_to_user(created_timer_id,
+			 &new_timer_id, sizeof (new_timer_id))) {
+		error = -EFAULT;
+		goto out;
+	}
 
 	error = CLOCK_DISPATCH(which_clock, timer_create, (new_timer));
 	if (error)