aboutsummaryrefslogtreecommitdiff
path: root/lib/test_fortify/write_overflow-strncpy-src.c
diff options
context:
space:
mode:
authorArnd Bergmann <[email protected]>2024-06-19 11:34:09 +0200
committerArnd Bergmann <[email protected]>2024-06-24 18:29:20 +0200
commit4b8e88e563b5f666446d002ad0dc1e6e8e7102b0 (patch)
tree4a3b1870dc71d4f2d867bf0217465c451f40c2a3 /lib/test_fortify/write_overflow-strncpy-src.c
parentf2661062f16b2de5d7b6a5c42a9a5c96326b8454 (diff)
ftruncate: pass a signed offset
The old ftruncate() syscall, using the 32-bit off_t misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncating to file size between 2GiB and 4GiB. Changing the type of the compat syscall to the signed compat_off_t changes the behavior so it instead returns -EINVAL. The native entry point, the truncate() syscall and the corresponding loff_t based variants are all correct already and do not suffer from this mistake. Fixes: 3f6d078d4acc ("fix compat truncate/ftruncate") Reviewed-by: Christian Brauner <[email protected]> Cc: [email protected] Signed-off-by: Arnd Bergmann <[email protected]>
Diffstat (limited to 'lib/test_fortify/write_overflow-strncpy-src.c')
0 files changed, 0 insertions, 0 deletions