[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH 1/2] Fix buffer overrun in sched_getaffinity
From: |
Mike McCormack |
Subject: |
[Qemu-devel] [PATCH 1/2] Fix buffer overrun in sched_getaffinity |
Date: |
Tue, 19 Apr 2011 15:09:47 +0900 |
User-agent: |
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.14) Gecko/20110223 Thunderbird/3.1.8 |
Zeroing of the cpu array should start from &cpus[kernel_ret]
not &cpus[num_zeros_to_fill].
This fixes a crash in EFL's edje_cc running under qemu-arm.
Signed-off-by: Mike McCormack <address@hidden>
Reviewed-by: Stefan Hajnoczi <address@hidden>
Acked-by: Mike Frysinger <address@hidden>
---
linux-user/syscall.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/linux-user/syscall.c b/linux-user/syscall.c
index bb0999d..1cda10a 100644
--- a/linux-user/syscall.c
+++ b/linux-user/syscall.c
@@ -6389,7 +6389,7 @@ abi_long do_syscall(void *cpu_env, int num, abi_long arg1,
unsigned long zero = arg2 - ret;
p = alloca(zero);
memset(p, 0, zero);
- if (copy_to_user(arg3 + zero, p, zero)) {
+ if (copy_to_user(arg3 + ret, p, zero)) {
goto efault;
}
arg2 = ret;
--
1.7.0.4
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [Qemu-devel] [PATCH 1/2] Fix buffer overrun in sched_getaffinity,
Mike McCormack <=