Re: [PATCH resend 3/5] libata-scsi: fix overflow in mode page copy

From: Tejun Heo
Date: Thu Jul 21 2016 - 17:17:31 EST


Hello,

On Fri, Jul 22, 2016 at 02:41:52AM +0800, tom.ty89@xxxxxxxxx wrote:
> From: Tom Yan <tom.ty89@xxxxxxxxx>
>
> ata_mselect_*() would initialize a char array for storing a copy of
> the current mode page. However, if char was actually signed char,
> overflow could occur.

Do you mean sign extension?

> For example, `0xff` from def_control_mpage[] would be "truncated"
> to `-1`. This prevented ata_mselect_control() from working at all,
> since when it did the read-only bits check, there would always be
> a mismatch.

Heh, the description doesn't really make sense. Are you talking about
something like the following?

char ar[N];
int i;

i = ar[x];
if (i == 0xff)
asdf;

If so, the description isn't quite right.

Thanks.

--
tejun