diff options
| author | Heiko Carstens | 2013-02-21 13:30:42 +0100 |
|---|---|---|
| committer | Martin Schwidefsky | 2013-02-28 09:37:08 +0100 |
| commit | f45655f6a65538237359abce55edab9cfcc6d82f (patch) | |
| tree | bf392ffe658ae512ed992ff24a3b6f5a32c092f7 /arch/s390/kernel/debug.c | |
| parent | s390/uaccess: shorten strncpy_from_user/strnlen_user (diff) | |
| download | kernel-qcow2-linux-f45655f6a65538237359abce55edab9cfcc6d82f.tar.gz kernel-qcow2-linux-f45655f6a65538237359abce55edab9cfcc6d82f.tar.xz kernel-qcow2-linux-f45655f6a65538237359abce55edab9cfcc6d82f.zip | |
s390/uaccess: fix strncpy_from_user/strnlen_user zero maxlen case
If the maximum length specified for the to be accessed string for
strncpy_from_user() and strnlen_user() is zero the following incorrect
values would be returned or incorrect memory accesses would happen:
strnlen_user_std() and strnlen_user_pt() incorrectly return "1"
strncpy_from_user_pt() would incorrectly access "dst[maxlen - 1]"
strncpy_from_user_mvcos() would incorrectly return "-EFAULT"
Fix all these oddities by adding early checks.
Reviewed-by: Gerald Schaefer <gerald.schaefer@de.ibm.com>
Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Diffstat (limited to 'arch/s390/kernel/debug.c')
0 files changed, 0 insertions, 0 deletions