From: Mike McCormack <mj.mccorm...@samsung.com> Zeroing of the cpu array should start from &cpus[kernel_ret] not &cpus[num_zeros_to_fill].
This fixes a crash in EFL's edje_cc running under qemu-arm. Signed-off-by: Mike McCormack <mj.mccorm...@samsung.com> Reviewed-by: Stefan Hajnoczi <stefa...@linux.vnet.ibm.com> Acked-by: Mike Frysinger <vap...@gentoo.org> Signed-off-by: Riku Voipio <riku.voi...@iki.fi> --- linux-user/syscall.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/linux-user/syscall.c b/linux-user/syscall.c index e969d1b..5b7b8e2 100644 --- a/linux-user/syscall.c +++ b/linux-user/syscall.c @@ -6505,7 +6505,7 @@ abi_long do_syscall(void *cpu_env, int num, abi_long arg1, unsigned long zero = arg2 - ret; p = alloca(zero); memset(p, 0, zero); - if (copy_to_user(arg3 + zero, p, zero)) { + if (copy_to_user(arg3 + ret, p, zero)) { goto efault; } arg2 = ret; -- 1.7.4.1