From: Jan Kara <jack@suse.cz>
To: Andrew Morton <akpm@linux-foundation.org>
Cc: linux-kernel@vger.kernel.org, Jan Kara <jack@suse.cz>,
Rasmus Villemoes <linux@rasmusvillemoes.dk>,
stable@vger.kernel.org
Subject: Re: [PATCH] bitmap: Fix undefined shift in __bitmap_shift_left()
Date: Wed, 22 Oct 2014 14:48:29 +0200 [thread overview]
Message-ID: <20141022124829.GA7041@quack.suse.cz> (raw)
In-Reply-To: <1413981831-6902-1-git-send-email-jack@suse.cz>
On Wed 22-10-14 14:43:51, Jan Kara wrote:
> It __bitmap_shift_left() is asked to shift by a multiple of
> BITS_PER_LONG, it will try to shift a long value by BITS_PER_LONG bits
> which is undefined. Change the function to take this into account.
>
> Coverity-id: 1192175
> CC: Rasmus Villemoes <linux@rasmusvillemoes.dk>
> CC: stable@vger.kernel.org
> Signed-off-by: Jan Kara <jack@suse.cz>
Oops, there's one more occurence of this. I'll send an updated patch.
Honza
> ---
> lib/bitmap.c | 4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/lib/bitmap.c b/lib/bitmap.c
> index cd250a2e14cb..02a8a439fcc7 100644
> --- a/lib/bitmap.c
> +++ b/lib/bitmap.c
> @@ -172,7 +172,9 @@ void __bitmap_shift_left(unsigned long *dst,
> upper = src[k];
> if (left && k == lim - 1)
> upper &= (1UL << left) - 1;
> - dst[k + off] = lower >> (BITS_PER_LONG - rem) | upper << rem;
> + dst[k + off] = upper << rem;
> + if (rem)
> + dst[k + off] |= lower >> (BITS_PER_LONG - rem);
> if (left && k + off == lim - 1)
> dst[k + off] &= (1UL << left) - 1;
> }
> --
> 1.8.1.4
>
--
Jan Kara <jack@suse.cz>
SUSE Labs, CR
prev parent reply other threads:[~2014-10-22 12:48 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-10-22 12:43 Jan Kara
2014-10-22 12:48 ` Jan Kara [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20141022124829.GA7041@quack.suse.cz \
--to=jack@suse.cz \
--cc=akpm@linux-foundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux@rasmusvillemoes.dk \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®