On Tuesday, May 24, 2016 3:04:47 AM CEST Yury Norov wrote:
+static unsigned long compat_sys_mmap2(compat_uptr_t addr, compat_size_t len,
+ int prot, int flags, int fd, off_t pgoff)
+{
+ if (pgoff & (~PAGE_MASK >> 12))
+ return -EINVAL;
+
+ return sys_mmap_pgoff(addr, len, prot, flags, fd,
+ pgoff >> (PAGE_SHIFT - 12));
+}
+
+static unsigned long compat_sys_pread64(unsigned int fd,
+ compat_uptr_t __user *ubuf, compat_size_t count, off_t offset)
+{
+ return sys_pread64(fd, (char *) ubuf, count, offset);
+}
+
+static unsigned long compat_sys_pwrite64(unsigned int fd,
+ compat_uptr_t __user *ubuf, compat_size_t count, off_t offset)
+{
+ return sys_pwrite64(fd, (char *) ubuf, count, offset);
+}
The use of compat_uptr_t seems inconsistent here, and neither of the two
ways of doing it is what we do elsewhere. compat_uptr_t is meant to
be a scalar 32-bit type that gets converted into a pointer using the
compat_ptr() macro, so compat_sys_mmap2 should not use compat_ptr_t
(we don't access it as a pointer in mmap_pgoff) but compat_ulong_t,
and compat_sys_pread64() should have a compat_uptr_t argument, not
pointer to compat_uptr_t.
Arnd