]> git.karo-electronics.de Git - karo-tx-linux.git/commit
ARM: 7851/1: check for number of arguments in syscall_get/set_arguments()
authorAKASHI Takahiro <takahiro.akashi@linaro.org>
Wed, 9 Oct 2013 14:58:29 +0000 (15:58 +0100)
committerJason Liu <r64343@freescale.com>
Wed, 6 Nov 2013 03:28:44 +0000 (11:28 +0800)
commit024d7690bb6260213ab69327fb9ce0a3a01d2fca
treebd77b4999c1179ab28e46178ba271ded783267f6
parent501454ee92342304ff49ee9458d2783665f27225
ARM: 7851/1: check for number of arguments in syscall_get/set_arguments()

commit 3c1532df5c1b54b5f6246cdef94eeb73a39fe43a upstream.

In ftrace_syscall_enter(),
    syscall_get_arguments(..., 0, n, ...)
        if (i == 0) { <handle ORIG_r0> ...; n--;}
        memcpy(..., n * sizeof(args[0]));
If 'number of arguments(n)' is zero and 'argument index(i)' is also zero in
syscall_get_arguments(), none of arguments should be copied by memcpy().
Otherwise 'n--' can be a big positive number and unexpected amount of data
will be copied. Tracing system calls which take no argument, say sync(void),
may hit this case and eventually make the system corrupted.
This patch fixes the issue both in syscall_get_arguments() and
syscall_set_arguments().

Acked-by: Will Deacon <will.deacon@arm.com>
Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
Signed-off-by: Will Deacon <will.deacon@arm.com>
Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 4a402463a7a4a4243c9c66600fd01ae800f959e3)
arch/arm/include/asm/syscall.h