s390/uaccess: fix strncpy_from_user/strnlen_user zero maxlen case
authorHeiko Carstens <heiko.carstens@de.ibm.com>
Thu, 21 Feb 2013 12:30:42 +0000 (13:30 +0100)
committerMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 28 Feb 2013 08:37:08 +0000 (09:37 +0100)
commitf45655f6a65538237359abce55edab9cfcc6d82f
treebf392ffe658ae512ed992ff24a3b6f5a32c092f7
parentd7b788cd06a3080ebf0b2f5f2e008d4fda2b336e
s390/uaccess: fix strncpy_from_user/strnlen_user zero maxlen case

If the maximum length specified for the to be accessed string for
strncpy_from_user() and strnlen_user() is zero the following incorrect
values would be returned or incorrect memory accesses would happen:

strnlen_user_std() and strnlen_user_pt() incorrectly return "1"
strncpy_from_user_pt() would incorrectly access "dst[maxlen - 1]"
strncpy_from_user_mvcos() would incorrectly return "-EFAULT"

Fix all these oddities by adding early checks.

Reviewed-by: Gerald Schaefer <gerald.schaefer@de.ibm.com>
Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
arch/s390/lib/uaccess_mvcos.c
arch/s390/lib/uaccess_pt.c
arch/s390/lib/uaccess_std.c