Commit e69d7005 authored by Al Viro's avatar Al Viro
Browse files

mips: copy_from_user() must zero the destination on access_ok() failure 



Cc: stable@vger.kernel.org
Signed-off-by: default avatarAl Viro <viro@zeniv.linux.org.uk>
parent 05d9d0b9

arch/mips/include/asm/uaccess.h

+3 −0
Original line number Diff line number Diff line
@@ -14,6 +14,7 @@ 
#include <linux/kernel.h>

#include <linux/errno.h>

#include <linux/thread_info.h>

#include <linux/string.h>

#include <asm/asm-eva.h>



/*
@@ -1170,6 +1171,8 @@ extern size_t __copy_in_user_eva(void *__to, const void *__from, size_t __n); 
			__cu_len = __invoke_copy_from_user(__cu_to,	\

							   __cu_from,	\

							   __cu_len);   \

		} else {						\

			memset(__cu_to, 0, __cu_len);			\

		}							\

	}								\

	__cu_len;							\