diff options
| author | Dave Jiang <dave.jiang@intel.com> | 2018-09-05 13:31:40 -0700 |
|---|---|---|
| committer | Dan Williams <dan.j.williams@intel.com> | 2018-09-12 14:58:47 -0700 |
| commit | dfb06cba8c73c0704710b2e3fbe2c35ac66a01b4 (patch) | |
| tree | 82805fc4baa84daa5ca0a8d62fee0ca1dda2efe0 /include | |
| parent | b90ca5cc32f59bb214847c6855959702f00c6801 (diff) | |
| download | linux-stable-dfb06cba8c73c0704710b2e3fbe2c35ac66a01b4.tar.gz linux-stable-dfb06cba8c73c0704710b2e3fbe2c35ac66a01b4.tar.bz2 linux-stable-dfb06cba8c73c0704710b2e3fbe2c35ac66a01b4.zip | |
uaccess: Fix is_source param for check_copy_size() in copy_to_iter_mcsafe()
copy_to_iter_mcsafe() is passing in the is_source parameter as "false"
to check_copy_size(). This is different than what copy_to_iter() does.
Also, the addr parameter passed to check_copy_size() is the source so
therefore we should be passing in "true" instead.
Fixes: 8780356ef630 ("x86/asm/memcpy_mcsafe: Define copy_to_iter_mcsafe()")
Cc: <stable@vger.kernel.org>
Reported-by: Fan Du <fan.du@intel.com>
Signed-off-by: Dave Jiang <dave.jiang@intel.com>
Reviewed-by: Vishal Verma <vishal.l.verma@intel.com>
Reported-by: Wenwei Tao <wenwei.tww@alibaba-inc.com>
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
Diffstat (limited to 'include')
| -rw-r--r-- | include/linux/uio.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/linux/uio.h b/include/linux/uio.h index 409c845d4cd3..422b1c01ee0d 100644 --- a/include/linux/uio.h +++ b/include/linux/uio.h @@ -172,7 +172,7 @@ size_t copy_from_iter_flushcache(void *addr, size_t bytes, struct iov_iter *i) static __always_inline __must_check size_t copy_to_iter_mcsafe(void *addr, size_t bytes, struct iov_iter *i) { - if (unlikely(!check_copy_size(addr, bytes, false))) + if (unlikely(!check_copy_size(addr, bytes, true))) return 0; else return _copy_to_iter_mcsafe(addr, bytes, i); |