]> git.baikalelectronics.ru Git - kernel.git/commit
lib: Fix strnlen_user() to not touch memory after specified maximum
authorJan Kara <jack@suse.cz>
Tue, 2 Jun 2015 15:10:28 +0000 (17:10 +0200)
committerLinus Torvalds <torvalds@linux-foundation.org>
Tue, 2 Jun 2015 17:28:52 +0000 (10:28 -0700)
commit61ff3677a14d400e0c1bf31a7495298bdc8b5e5a
tree55542172dd992db5172eb64078ce01cac7db1a7b
parent75e54d0aeb21f9217b91de59fe0ffb181c8932a5
lib: Fix strnlen_user() to not touch memory after specified maximum

If the specified maximum length of the string is a multiple of unsigned
long, we would load one long behind the specified maximum.  If that
happens to be in a next page, we can hit a page fault although we were
not expected to.

Fix the off-by-one bug in the test whether we are at the end of the
specified range.

Signed-off-by: Jan Kara <jack@suse.cz>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
lib/strnlen_user.c