Linus Torvalds 12e993b894 x86-32: fix up strncpy_from_user() sign error ... The 'max' range needs to be unsigned, since the size of the user address space is bigger than 2GB. We know that 'count' is positive in 'long' (that is checked in the caller), so we will truncate 'max' down to something that fits in a signed long, but before we actually do that, that comparison needs to be done in unsigned. Bug introduced in commit 92ae03f2ef ("x86: merge 32/64-bit versions of 'strncpy_from_user()' and speed it up"). On x86-64 you can't trigger this, since the user address space is much smaller than 63 bits, and on x86-32 it works in practice, since you would seldom hit the strncpy limits anyway. I had actually tested the corner-cases, I had only tested them on x86-64. Besides, I had only worried about the case of a pointer *close* to the end of the address space, rather than really far away from it ;) This also changes the "we hit the user-specified maximum" to return 'res', for the trivial reason that gcc seems to generate better code that way. 'res' and 'count' are the same in that case, so it really doesn't matter which one we return. Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2012-04-15 17:23:00 -07:00
..
.gitignore
atomic64_32.c	x86: Adjust asm constraints in atomic64 wrappers	2012-01-20 17:29:31 -08:00
atomic64_386_32.S	x86: atomic64 assembly improvements	2012-01-20 17:29:49 -08:00
atomic64_cx8_32.S	x86: atomic64 assembly improvements	2012-01-20 17:29:49 -08:00
cache-smp.c
checksum_32.S
clear_page_64.S
cmpxchg.c
cmpxchg8b_emu.S
cmpxchg16b_emu.S
copy_page_64.S	x86-64: Slightly shorten copy_page()	2012-01-06 12:25:37 +01:00
copy_user_64.S
copy_user_nocache_64.S
csum-copy_64.S
csum-partial_64.c
csum-wrappers_64.c
delay.c	x86: Derandom delay_tsc for 64 bit	2012-03-09 12:43:27 -08:00
getuser.S
inat.c	x86: Fix to decode grouped AVX with VEX pp bits	2012-02-11 15:11:35 +01:00
insn.c	x86: Fix to decode grouped AVX with VEX pp bits	2012-02-11 15:11:35 +01:00
iomap_copy_64.S
Makefile	Merge branch 'x86-asm-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2011-07-22 17:02:24 -07:00
memcpy_32.c
memcpy_64.S	x86-64: Handle byte-wise tail copying in memcpy() without a loop	2012-01-26 21:19:20 +01:00
memmove_64.S
memset_64.S	x86-64: Fix memset() to support sizes of 4Gb and above	2012-01-26 11:50:04 +01:00
mmx_32.c
msr-reg-export.c
msr-reg.S
msr-smp.c
msr.c
putuser.S
rwlock.S	x86: Fix write lock scalability 64-bit issue	2011-07-21 09:03:36 +02:00
rwsem.S	x86: Unify rwsem assembly implementation	2011-07-21 09:03:32 +02:00
string_32.c	x86/i386: Use less assembly in strlen(), speed things up a bit	2011-12-12 18:33:42 +01:00
strstr_32.c
thunk_32.S
thunk_64.S	x86: Fix write lock scalability 64-bit issue	2011-07-21 09:03:36 +02:00
usercopy_32.c	x86: merge 32/64-bit versions of 'strncpy_from_user()' and speed it up	2012-04-11 09:41:28 -07:00
usercopy_64.c	x86: merge 32/64-bit versions of 'strncpy_from_user()' and speed it up	2012-04-11 09:41:28 -07:00
usercopy.c	x86-32: fix up strncpy_from_user() sign error	2012-04-15 17:23:00 -07:00
x86-opcode-map.txt	Merge branches 'sched-urgent-for-linus', 'perf-urgent-for-linus' and 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2012-01-19 14:53:06 -08:00