This is a note to let you know that I've just added the patch titled

    regmap: debugfs: Avoid overflows for very small reads

to the 3.4-stable tree which can be found at:
    
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     regmap-debugfs-avoid-overflows-for-very-small-reads.patch
and it can be found in the queue-3.4 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.


>From db04328c167ff8e7c57f4a3532214aeada3a82fd Mon Sep 17 00:00:00 2001
From: Mark Brown <[email protected]>
Date: Tue, 11 Dec 2012 01:14:11 +0900
Subject: regmap: debugfs: Avoid overflows for very small reads

From: Mark Brown <[email protected]>

commit db04328c167ff8e7c57f4a3532214aeada3a82fd upstream.

If count is less than the size of a register then we may hit integer
wraparound when trying to move backwards to check if we're still in
the buffer. Instead move the position forwards to check if it's still
in the buffer, we are unlikely to be able to allocate a buffer
sufficiently big to overflow here.

Signed-off-by: Mark Brown <[email protected]>
Cc: [email protected]

---
 drivers/base/regmap/regmap-debugfs.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/drivers/base/regmap/regmap-debugfs.c
+++ b/drivers/base/regmap/regmap-debugfs.c
@@ -90,7 +90,7 @@ static ssize_t regmap_map_read_file(stru
                /* If we're in the region the user is trying to read */
                if (p >= *ppos) {
                        /* ...but not beyond it */
-                       if (buf_pos >= count - 1 - tot_len)
+                       if (buf_pos + 1 + tot_len >= count)
                                break;
 
                        /* Format the register */


Patches currently in stable-queue which might be from 
[email protected] are

queue-3.4/mfd-wm8994-add-support-for-wm1811-rev-e.patch
queue-3.4/regmap-debugfs-avoid-overflows-for-very-small-reads.patch
queue-3.4/mfd-only-unregister-platform-devices-allocated-by-the-mfd-core.patch
queue-3.4/asoc-sigmadsp-fix-endianness-conversion-issue.patch
queue-3.4/regulator-wm831x-set-the-new-rather-than-old-value-for-dvs-vsel.patch
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to