linux-user: Dereference Pointer Argument to ipc/semctl Sys Call

When the ipc system call is used to wrap a semctl system call,
the ptr argument to ipc needs to be dereferenced prior to passing
it to the semctl handler.  This is because the fourth argument to
semctl is a union and not a pointer to a union.

Signed-off-by: Tom Musta <tommusta@gmail.com>
Signed-off-by: Riku Voipio <riku.voipio@linaro.org>
This commit is contained in:
Tom Musta 2014-08-12 13:53:33 -05:00 committed by Riku Voipio
parent 035273440b
commit 5d2fa8ebb4
1 changed files with 8 additions and 2 deletions

View File

@ -3140,9 +3140,15 @@ static abi_long do_ipc(unsigned int call, int first,
ret = get_errno(semget(first, second, third));
break;
case IPCOP_semctl:
ret = do_semctl(first, second, third, (union target_semun)(abi_ulong) ptr);
case IPCOP_semctl: {
/* The semun argument to semctl is passed by value, so dereference the
* ptr argument. */
abi_ulong atptr;
get_user_ual(atptr, (abi_ulong)ptr);
ret = do_semctl(first, second, third,
(union target_semun)(abi_ulong) atptr);
break;
}
case IPCOP_msgget:
ret = get_errno(msgget(first, second));