diff options
| author | Al Viro <viro@zeniv.linux.org.uk> | 2016-05-09 17:54:48 +0200 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2016-05-09 20:04:29 +0200 |
| commit | dd254f5a382cc7879db7a07ed266b12d38fe3ab6 (patch) | |
| tree | bd644bbc841c64c265d72c74d9c82d9df61d4064 /firmware | |
| parent | Merge branch 'for-linus' into work.iov_iter (diff) | |
| download | linux-dd254f5a382cc7879db7a07ed266b12d38fe3ab6.tar.xz linux-dd254f5a382cc7879db7a07ed266b12d38fe3ab6.zip | |
fold checks into iterate_and_advance()
they are open-coded in all users except iov_iter_advance(), and there
they wouldn't be a bad idea either - as it is, iov_iter_advance(i, 0)
ends up dereferencing potentially past the end of iovec array. It
doesn't do anything with the value it reads, and very unlikely to
trigger an oops on dereference, but it is not impossible.
Reported-by: Jiri Slaby <jslaby@suse.cz>
Reported-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'firmware')
0 files changed, 0 insertions, 0 deletions