]> git.karo-electronics.de Git - linux-beck.git/commitdiff
s390/uaccess: fix possible register corruption in strnlen_user_srst()
authorHeiko Carstens <heiko.carstens@de.ibm.com>
Wed, 9 Apr 2014 07:42:58 +0000 (09:42 +0200)
committerMartin Schwidefsky <schwidefsky@de.ibm.com>
Fri, 11 Apr 2014 11:53:33 +0000 (13:53 +0200)
The whole point of the out-of-line strnlen_user_srst() function was to
avoid corruption of register 0 due to register asm assignment.
However 'somebody' :) forgot to remove the update_primary_asce() function
call, which may clobber register 0 contents.
So let's remove that call and also move the size check to the calling
function.

Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
arch/s390/lib/uaccess.c

index 23f866b4c7f1f3564747c8e1251ea3a05bae420d..7416efe8eae419c1249cf60c8f60dc268d1487cc 100644 (file)
@@ -338,9 +338,6 @@ static inline unsigned long strnlen_user_srst(const char __user *src,
        register unsigned long reg0 asm("0") = 0;
        unsigned long tmp1, tmp2;
 
-       if (unlikely(!size))
-               return 0;
-       update_primary_asce(current);
        asm volatile(
                "   la    %2,0(%1)\n"
                "   la    %3,0(%0,%1)\n"
@@ -359,6 +356,8 @@ static inline unsigned long strnlen_user_srst(const char __user *src,
 
 unsigned long __strnlen_user(const char __user *src, unsigned long size)
 {
+       if (unlikely(!size))
+               return 0;
        update_primary_asce(current);
        return strnlen_user_srst(src, size);
 }