Re: [patch 1/3] futex_compat: fix list traversal bugs
* [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > The futex list traversal on the compat side appears to have a bug. > > It's loop termination condition compares: > > while (compat_ptr(uentry) != >list) > > But that can't be right because "uentry" has the special "pi" > indicator bit still potentially set at bit 0. This is cleared by > fetch_robust_entry() into the "entry" return value. hm. I remember having tested this - not well enough i guess :-/ Acked-by: Ingo Molnar <[EMAIL PROTECTED]> Ingo - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Re: [patch 1/3] futex_compat: fix list traversal bugs
* [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The futex list traversal on the compat side appears to have a bug. It's loop termination condition compares: while (compat_ptr(uentry) != head-list) But that can't be right because uentry has the special pi indicator bit still potentially set at bit 0. This is cleared by fetch_robust_entry() into the entry return value. hm. I remember having tested this - not well enough i guess :-/ Acked-by: Ingo Molnar [EMAIL PROTECTED] Ingo - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
