diff options
author | Heiko Carstens <heiko.carstens@de.ibm.com> | 2013-04-20 13:01:19 +0200 |
---|---|---|
committer | Martin Schwidefsky <schwidefsky@de.ibm.com> | 2013-04-23 10:18:09 +0200 |
commit | a2aec0d3e22f3f940a165181ef339ac16deefa7c (patch) | |
tree | 5f34dc6588089c41ade585302f6c53e5f303f862 /arch/s390/include/asm/mmu.h | |
parent | s390/zcore: Fix HSA copy length for last block (diff) | |
download | linux-a2aec0d3e22f3f940a165181ef339ac16deefa7c.tar.xz linux-a2aec0d3e22f3f940a165181ef339ac16deefa7c.zip |
s390/compat: fix compat_sys_statfs() memory corruption
The f_spare field within struct compat_statfs is four bytes larger
than within the native 31 bit struct statfs.
compat_sys_statfs() clears the f_spare field in user space which
means that in compat mode four bytes that are behind the user space
supplied struct compat_statfs will be corrupted (zeroed).
According to Thomas Gleixner's Linux 2.6 history tree this bug is
present since v2.5.74 87880da124 "[PATCH] s390: 31 bit compat.".
So it get's fixed shortly before its 10th anniversary. Tough luck.
Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Diffstat (limited to 'arch/s390/include/asm/mmu.h')
0 files changed, 0 insertions, 0 deletions