| commit | 502585c7555083d4a949c08350306b9ec196779e | [log] [tgz] |
|---|---|---|
| author | Dave Martin <Dave.Martin@arm.com> | Mon Mar 27 15:10:54 2017 +0100 |
| committer | Linus Torvalds <torvalds@linux-foundation.org> | Wed Mar 29 08:54:17 2017 -0700 |
| tree | ceadf8d793ceaae32940754291fbd056a7cfa2ce | |
| parent | fb411b837b587a32046dc4f369acb93a10b1def8 [diff] |
h8300/ptrace: Fix incorrect register transfer count regs_set() and regs_get() are vulnerable to an off-by-1 buffer overrun if CONFIG_CPU_H8S is set, since this adds an extra entry to register_offset[] but not to user_regs_struct. So, iterate over user_regs_struct based on its actual size, not based on the length of register_offset[]. Signed-off-by: Dave Martin <Dave.Martin@arm.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>