aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/fc4/ssh:/git:/git.zx2c4.com
diff options
context:
space:
mode:
authorRussell King (Oracle) <rmk+kernel@armlinux.org.uk>2022-07-26 23:51:48 +0100
committerRussell King (Oracle) <rmk+kernel@armlinux.org.uk>2022-07-29 09:54:26 +0100
commitec85bd369fd2bfaed6f45dd678706429d4f75b48 (patch)
treef57a23467a04861d936011986cb005740199659f /drivers/fc4/ssh:/git:/git.zx2c4.com
parentARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (diff)
ARM: findbit: fix overflowing offset
When offset is larger than the size of the bit array, we should not attempt to access the array as we can perform an access beyond the end of the array. Fix this by changing the pre-condition. Using "cmp r2, r1; bhs ..." covers us for the size == 0 case, since this will always take the branch when r1 is zero, irrespective of the value of r2. This means we can fix this bug without adding any additional code! Tested-by: Guenter Roeck <linux@roeck-us.net> Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
Diffstat (limited to 'drivers/fc4/ssh:/git:/git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions
ng/commit/kernel/uid16.c?id=a29c33f4e506e1dae7e0985b6328046535becbf8'>userns: Convert setting and getting uid and gid system calls to use kuid and kgidEric W. Biederman1-12/+22 2012-05-03userns: Convert group_info values from gid_t to kgid_t.Eric W. Biederman1-2/+12 2011-03-23userns: user namespaces: convert several capable() callsSerge E. Hallyn1-1/+1 2009-09-23headers: utsname.h reduxAlexey Dobriyan1-1/+0 2009-01-14[CVE-2009-0029] System call wrappers part 19Heiko Carstens1-6/+6 2009-01-14[CVE-2009-0029] System call wrappers part 18Heiko Carstens1-10/+11 2009-01-14[CVE-2009-0029] System call wrappers part 17Heiko Carstens1-3/+3 2008-11-14CRED: Wrap current->cred and a few other accessorsDavid Howells1-15/+16 2008-11-14CRED: Separate task security context from task_structDavid Howells1-14/+14 2008-04-10asmlinkage_protect replaces prevent_tail_callRoland McGrath1-11/+11