linux/include/asm-powerpc
Nate Case 9c8387afdc [POWERPC] Fix uninitialized variable bug in copy_{to|from}_user
Calls to copy_to_user() or copy_from_user() can fail when copying N
bytes, where N is a constant less than 8, but not 1, 2, 4, or 8,
because 'ret' is not initialized and is only set if the size is 1,
2, 4 or 8, but is tested after the switch statement for any constant
size <= 8.  This fixes it by initializing 'ret' to 1, causing the
code to fall through to the __copy_tofrom_user call for sizes other
than 1, 2, 4 or 8.

Signed-off-by: Dave Scidmore <dscidmore@xes-inc.com>
Signed-off-by: Nate Case <ncase@xes-inc.com>
Signed-off-by: Paul Mackerras <paulus@samba.org>
2008-05-15 20:49:52 +10:00
..
2008-01-30 13:34:07 +01:00
2007-07-31 21:12:07 -07:00
2008-02-03 16:32:51 +02:00
2008-02-06 10:41:00 -08:00
2006-12-04 20:39:30 +11:00
2007-10-15 14:29:49 -04:00
2008-02-06 10:41:02 -08:00
2007-03-09 15:03:25 +11:00
2007-03-22 22:52:55 +11:00
2007-07-17 10:23:11 -07:00
2007-10-17 08:42:55 -07:00
2007-10-11 09:14:31 -05:00
2008-04-18 00:46:35 +02:00
2008-05-05 16:47:14 +10:00
2008-04-29 08:06:02 -07:00
2008-01-25 22:52:50 +11:00
2008-04-27 18:21:39 +03:00
2007-05-08 11:15:20 -07:00
2007-06-28 19:16:38 +10:00
2007-10-19 11:53:41 -07:00
2008-04-27 18:21:37 +03:00
2007-08-20 07:28:48 -05:00
2006-12-11 16:35:07 +11:00
2007-05-08 11:15:05 -07:00
2008-03-05 16:34:39 -06:00
2006-06-30 18:20:44 +02:00
2007-04-24 21:31:51 +10:00
2007-05-11 08:29:34 -07:00
2007-12-11 15:43:35 +11:00
2007-06-28 19:19:20 +10:00
2008-04-17 01:01:39 -05:00
2008-03-03 08:03:14 +01:00
2008-04-17 10:42:34 -04:00
2007-05-02 20:04:30 +10:00
2006-10-25 11:54:18 +10:00
2007-05-08 11:54:20 +10:00
2008-02-07 08:42:30 -08:00