diff options
| author | Mitchell Blank Jr <[email protected]> | 2006-04-11 05:54:08 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2006-04-11 13:18:41 +0000 |
| commit | b04eb6aa08ecc3e24df2f78ebc486011ebd74feb (patch) | |
| tree | 8dbf6a2449f886f0db9c3082dabdf83d4c4f04f7 /lib/string.c | |
| parent | [PATCH] Reinstate const in next_thread() (diff) | |
| download | kernel-b04eb6aa08ecc3e24df2f78ebc486011ebd74feb.tar.gz kernel-b04eb6aa08ecc3e24df2f78ebc486011ebd74feb.zip | |
[PATCH] select: don't overflow if (SELECT_STACK_ALLOC % sizeof(long) != 0)
If SELECT_STACK_ALLOC is not a multiple of sizeof(long) then stack_fds[]
would be shorter than SELECT_STACK_ALLOC bytes and could overflow later in
the function. Fixed by simply rearranging the test later to work on
sizeof(stack_fds) Currently SELECT_STACK_ALLOC is 256 so this doesn't
happen, but it's nasty to have things like this hidden in the code. What
if later someone decides to change SELECT_STACK_ALLOC to 300?
Signed-off-by: Mitchell Blank Jr <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'lib/string.c')
0 files changed, 0 insertions, 0 deletions