linux/ipc
Mateusz Guzik e7ca255236 ipc: fix compat msgrcv with negative msgtyp
Compat function takes msgtyp argument as u32 and passes it down to
do_msgrcv which results in casting to long, thus the sign is lost and we
get a big positive number instead.

Cast the argument to signed type before passing it down.

Signed-off-by: Mateusz Guzik <mguzik@redhat.com>
Reported-by: Gabriellla Schmidt <gsc@bruker.de>
Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: Davidlohr Bueso <davidlohr@hp.com>
Cc: Manfred Spraul <manfred@colorfullife.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2014-01-27 21:02:40 -08:00
..
compat.c ipc: fix compat msgrcv with negative msgtyp 2014-01-27 21:02:40 -08:00
compat_mq.c ipc: whitespace cleanup 2014-01-27 21:02:39 -08:00
ipc_sysctl.c ipc: whitespace cleanup 2014-01-27 21:02:39 -08:00
ipcns_notifier.c
Makefile
mq_sysctl.c
mqueue.c ipc: remove braces for single statements 2014-01-27 21:02:39 -08:00
msg.c ipc,msg: document barriers 2014-01-27 21:02:40 -08:00
msgutil.c ipc, msg: fix message length check for negative values 2013-11-13 12:09:36 +09:00
namespace.c ipc: drop ipc_lock_by_ptr 2013-09-11 15:59:44 -07:00
sem.c ipc: remove braces for single statements 2014-01-27 21:02:39 -08:00
shm.c ipc: standardize code comments 2014-01-27 21:02:39 -08:00
syscall.c
util.c ipc: delete seq_max field in struct ipc_ids 2014-01-27 21:02:40 -08:00
util.h ipc: delete seq_max field in struct ipc_ids 2014-01-27 21:02:40 -08:00