Re: parisc setup_sigcontext32() array overflows

From: Kyle McMartin
Date: Sat May 17 2008 - 15:23:12 EST


On Sat, May 17, 2008 at 10:16:37PM +0300, Adrian Bunk wrote:
> setup_sigcontext32(struct compat_sigcontext __user *sc, struct compat_regfile __user * rf,
> struct pt_regs *regs, int in_syscall)
> {
> ...
> /* Store upper half */
> compat_reg = (compat_uint_t)(regs->gr[32] >> 32);
> ... ^^
> /* Store upper half */
> compat_reg = (compat_uint_t)((regs->gr[32]+4) >> 32);
> ... ^^
>
> <-- snip -->

Yeah, I've already fixed these, was waiting for an ack from the author.

r, Kyle
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/