diff options
author | Al Viro <viro@zeniv.linux.org.uk> | 2012-04-22 16:51:36 -0400 |
---|---|---|
committer | Al Viro <viro@zeniv.linux.org.uk> | 2012-05-21 23:59:21 -0400 |
commit | 187cd44e147ec7245ddd97bbd3305d29583288a9 (patch) | |
tree | 53d312b49553b7000a1e06d055224759a5f75332 /arch | |
parent | 9a07880222b6e50cee2c2d66270cff0c34bfe7b8 (diff) |
sparc: missing checks of __get_user()/__put_user() return values
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'arch')
-rw-r--r-- | arch/sparc/kernel/signal32.c | 10 | ||||
-rw-r--r-- | arch/sparc/kernel/sys_sparc_32.c | 12 |
2 files changed, 12 insertions, 10 deletions
diff --git a/arch/sparc/kernel/signal32.c b/arch/sparc/kernel/signal32.c index 948700fb903..bb1513e45f1 100644 --- a/arch/sparc/kernel/signal32.c +++ b/arch/sparc/kernel/signal32.c | |||
@@ -215,8 +215,9 @@ void do_sigreturn32(struct pt_regs *regs) | |||
215 | (((unsigned long) sf) & 3)) | 215 | (((unsigned long) sf) & 3)) |
216 | goto segv; | 216 | goto segv; |
217 | 217 | ||
218 | get_user(pc, &sf->info.si_regs.pc); | 218 | if (get_user(pc, &sf->info.si_regs.pc) || |
219 | __get_user(npc, &sf->info.si_regs.npc); | 219 | __get_user(npc, &sf->info.si_regs.npc)) |
220 | goto segv; | ||
220 | 221 | ||
221 | if ((pc | npc) & 3) | 222 | if ((pc | npc) & 3) |
222 | goto segv; | 223 | goto segv; |
@@ -305,8 +306,9 @@ asmlinkage void do_rt_sigreturn32(struct pt_regs *regs) | |||
305 | (((unsigned long) sf) & 3)) | 306 | (((unsigned long) sf) & 3)) |
306 | goto segv; | 307 | goto segv; |
307 | 308 | ||
308 | get_user(pc, &sf->regs.pc); | 309 | if (get_user(pc, &sf->regs.pc) || |
309 | __get_user(npc, &sf->regs.npc); | 310 | __get_user(npc, &sf->regs.npc)) |
311 | goto segv; | ||
310 | 312 | ||
311 | if ((pc | npc) & 3) | 313 | if ((pc | npc) & 3) |
312 | goto segv; | 314 | goto segv; |
diff --git a/arch/sparc/kernel/sys_sparc_32.c b/arch/sparc/kernel/sys_sparc_32.c index 627e89af1d7..cd99c1a7870 100644 --- a/arch/sparc/kernel/sys_sparc_32.c +++ b/arch/sparc/kernel/sys_sparc_32.c | |||
@@ -184,10 +184,10 @@ sparc_sigaction (int sig, const struct old_sigaction __user *act, | |||
184 | 184 | ||
185 | if (!access_ok(VERIFY_READ, act, sizeof(*act)) || | 185 | if (!access_ok(VERIFY_READ, act, sizeof(*act)) || |
186 | __get_user(new_ka.sa.sa_handler, &act->sa_handler) || | 186 | __get_user(new_ka.sa.sa_handler, &act->sa_handler) || |
187 | __get_user(new_ka.sa.sa_restorer, &act->sa_restorer)) | 187 | __get_user(new_ka.sa.sa_restorer, &act->sa_restorer) || |
188 | __get_user(new_ka.sa.sa_flags, &act->sa_flags) || | ||
189 | __get_user(mask, &act->sa_mask)) | ||
188 | return -EFAULT; | 190 | return -EFAULT; |
189 | __get_user(new_ka.sa.sa_flags, &act->sa_flags); | ||
190 | __get_user(mask, &act->sa_mask); | ||
191 | siginitset(&new_ka.sa.sa_mask, mask); | 191 | siginitset(&new_ka.sa.sa_mask, mask); |
192 | new_ka.ka_restorer = NULL; | 192 | new_ka.ka_restorer = NULL; |
193 | } | 193 | } |
@@ -202,10 +202,10 @@ sparc_sigaction (int sig, const struct old_sigaction __user *act, | |||
202 | */ | 202 | */ |
203 | if (!access_ok(VERIFY_WRITE, oact, sizeof(*oact)) || | 203 | if (!access_ok(VERIFY_WRITE, oact, sizeof(*oact)) || |
204 | __put_user(old_ka.sa.sa_handler, &oact->sa_handler) || | 204 | __put_user(old_ka.sa.sa_handler, &oact->sa_handler) || |
205 | __put_user(old_ka.sa.sa_restorer, &oact->sa_restorer)) | 205 | __put_user(old_ka.sa.sa_restorer, &oact->sa_restorer) || |
206 | __put_user(old_ka.sa.sa_flags, &oact->sa_flags) || | ||
207 | __put_user(old_ka.sa.sa_mask.sig[0], &oact->sa_mask)) | ||
206 | return -EFAULT; | 208 | return -EFAULT; |
207 | __put_user(old_ka.sa.sa_flags, &oact->sa_flags); | ||
208 | __put_user(old_ka.sa.sa_mask.sig[0], &oact->sa_mask); | ||
209 | } | 209 | } |
210 | 210 | ||
211 | return ret; | 211 | return ret; |