The proposed patch doesn't work because in compat_rw_copy_check_uvector(), 'iov' is incremented in the loop before it is freed or returned. This probably should be changed to indexing with 'seg', like in the non-compat version... -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Re: [PATCH] vfs: rw_copy_check_uvector() - free iov on erro... Dave Jones
- Re: [PATCH] vfs: rw_copy_check_uvector() - free iov on... Miklos Szeredi
- Re: [PATCH] vfs: rw_copy_check_uvector() - free io... Dave Jones
- Re: [PATCH] vfs: rw_copy_check_uvector() - fre... Eric Biggers
- Re: [PATCH] vfs: rw_copy_check_uvector() -... Eric Biggers