commit d0969d1949cc67a0f100f30ad69ec7ec1eca70d2 · tjh.dev/kernel

tjh.dev / kernel

Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

kernel os linux

HPFS: Fix some unaligned accesses

Fix some unaligned accesses

Signed-off-by: Mikulas Patocka <mikulas@artax.karlin.mff.cuni.cz>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

authored by Mikulas Patocka and committed by Linus Torvalds 14 years ago d0969d19 0b69760b

+32 -24

3 changed files

expand all

unified split

hpfs

ea.c

hpfs.h

hpfs_fn.h

+21 -20

fs/hpfs/ea.c

··· 24 24 } 25 25 if (hpfs_ea_read(s, a, ano, pos, 4, ex)) return; 26 26 if (ea->indirect) { 27 - if (le16_to_cpu(ea->valuelen) != 8) { 27 + if (ea_valuelen(ea) != 8) { 28 28 hpfs_error(s, "ea->indirect set while ea->valuelen!=8, %s %08x, pos %08x", 29 29 ano ? "anode" : "sectors", a, pos); 30 30 return; ··· 33 33 return; 34 34 hpfs_ea_remove(s, ea_sec(ea), ea->anode, ea_len(ea)); 35 35 } 36 - pos += ea->namelen + le16_to_cpu(ea->valuelen) + 5; 36 + pos += ea->namelen + ea_valuelen(ea) + 5; 37 37 } 38 38 if (!ano) hpfs_free_sectors(s, a, (len+511) >> 9); 39 39 else { ··· 82 82 if (!strcmp(ea->name, key)) { 83 83 if (ea->indirect) 84 84 goto indirect; 85 - if (le16_to_cpu(ea->valuelen) >= size) 85 + if (ea_valuelen(ea) >= size) 86 86 return -EINVAL; 87 - memcpy(buf, ea_data(ea), le16_to_cpu(ea->valuelen)); 88 - buf[le16_to_cpu(ea->valuelen)] = 0; 87 + memcpy(buf, ea_data(ea), ea_valuelen(ea)); 88 + buf[ea_valuelen(ea)] = 0; 89 89 return 0; 90 90 } 91 91 a = le32_to_cpu(fnode->ea_secno); ··· 106 106 if (!strcmp(ea->name, key)) { 107 107 if (ea->indirect) 108 108 goto indirect; 109 - if (le16_to_cpu(ea->valuelen) >= size) 109 + if (ea_valuelen(ea) >= size) 110 110 return -EINVAL; 111 - if (hpfs_ea_read(s, a, ano, pos + 4 + ea->namelen + 1, le16_to_cpu(ea->valuelen), buf)) 111 + if (hpfs_ea_read(s, a, ano, pos + 4 + ea->namelen + 1, ea_valuelen(ea), buf)) 112 112 return -EIO; 113 - buf[le16_to_cpu(ea->valuelen)] = 0; 113 + buf[ea_valuelen(ea)] = 0; 114 114 return 0; 115 115 } 116 - pos += ea->namelen + le16_to_cpu(ea->valuelen) + 5; 116 + pos += ea->namelen + ea_valuelen(ea) + 5; 117 117 } 118 118 return -ENOENT; 119 119 indirect: ··· 138 138 if (!strcmp(ea->name, key)) { 139 139 if (ea->indirect) 140 140 return get_indirect_ea(s, ea->anode, ea_sec(ea), *size = ea_len(ea)); 141 - if (!(ret = kmalloc((*size = le16_to_cpu(ea->valuelen)) + 1, GFP_NOFS))) { 141 + if (!(ret = kmalloc((*size = ea_valuelen(ea)) + 1, GFP_NOFS))) { 142 142 printk("HPFS: out of memory for EA\n"); 143 143 return NULL; 144 144 } 145 - memcpy(ret, ea_data(ea), le16_to_cpu(ea->valuelen)); 146 - ret[le16_to_cpu(ea->valuelen)] = 0; 145 + memcpy(ret, ea_data(ea), ea_valuelen(ea)); 146 + ret[ea_valuelen(ea)] = 0; 147 147 return ret; 148 148 } 149 149 a = le32_to_cpu(fnode->ea_secno); ··· 164 164 if (!strcmp(ea->name, key)) { 165 165 if (ea->indirect) 166 166 return get_indirect_ea(s, ea->anode, ea_sec(ea), *size = ea_len(ea)); 167 - if (!(ret = kmalloc((*size = le16_to_cpu(ea->valuelen)) + 1, GFP_NOFS))) { 167 + if (!(ret = kmalloc((*size = ea_valuelen(ea)) + 1, GFP_NOFS))) { 168 168 printk("HPFS: out of memory for EA\n"); 169 169 return NULL; 170 170 } 171 - if (hpfs_ea_read(s, a, ano, pos + 4 + ea->namelen + 1, le16_to_cpu(ea->valuelen), ret)) { 171 + if (hpfs_ea_read(s, a, ano, pos + 4 + ea->namelen + 1, ea_valuelen(ea), ret)) { 172 172 kfree(ret); 173 173 return NULL; 174 174 } 175 - ret[le16_to_cpu(ea->valuelen)] = 0; 175 + ret[ea_valuelen(ea)] = 0; 176 176 return ret; 177 177 } 178 - pos += ea->namelen + le16_to_cpu(ea->valuelen) + 5; 178 + pos += ea->namelen + ea_valuelen(ea) + 5; 179 179 } 180 180 return NULL; 181 181 } ··· 202 202 if (ea->indirect) { 203 203 if (ea_len(ea) == size) 204 204 set_indirect_ea(s, ea->anode, ea_sec(ea), data, size); 205 - } else if (le16_to_cpu(ea->valuelen) == size) { 205 + } else if (ea_valuelen(ea) == size) { 206 206 memcpy(ea_data(ea), data, size); 207 207 } 208 208 return; ··· 228 228 set_indirect_ea(s, ea->anode, ea_sec(ea), data, size); 229 229 } 230 230 else { 231 - if (le16_to_cpu(ea->valuelen) == size) 231 + if (ea_valuelen(ea) == size) 232 232 hpfs_ea_write(s, a, ano, pos + 4 + ea->namelen + 1, size, data); 233 233 } 234 234 return; 235 235 } 236 - pos += ea->namelen + le16_to_cpu(ea->valuelen) + 5; 236 + pos += ea->namelen + ea_valuelen(ea) + 5; 237 237 } 238 238 if (!le16_to_cpu(fnode->ea_offs)) { 239 239 /*if (le16_to_cpu(fnode->ea_size_s)) { ··· 254 254 ea = fnode_end_ea(fnode); 255 255 *(char *)ea = 0; 256 256 ea->namelen = strlen(key); 257 - ea->valuelen = cpu_to_le16(size); 257 + ea->valuelen_lo = size; 258 + ea->valuelen_hi = size >> 8; 258 259 strcpy(ea->name, key); 259 260 memcpy(ea_data(ea), data, size); 260 261 fnode->ea_size_s = cpu_to_le16(le16_to_cpu(fnode->ea_size_s) + strlen(key) + size + 5);

+2 -1

fs/hpfs/hpfs.h

··· 546 546 where real value starts */ 547 547 #endif 548 548 u8 namelen; /* length of name, bytes */ 549 - u16 valuelen; /* length of value, bytes */ 549 + u8 valuelen_lo; /* length of value, bytes */ 550 + u8 valuelen_hi; /* length of value, bytes */ 550 551 u8 name[0]; 551 552 /* 552 553 u8 name[namelen]; ascii attrib name

+9 -3

fs/hpfs/hpfs_fn.h

··· 13 13 #include <linux/pagemap.h> 14 14 #include <linux/buffer_head.h> 15 15 #include <linux/slab.h> 16 + #include <asm/unaligned.h> 16 17 17 18 #include "hpfs.h" 18 19 ··· 136 135 return (struct extended_attribute *)((char *)fnode + le16_to_cpu(fnode->ea_offs) + le16_to_cpu(fnode->acl_size_s) + le16_to_cpu(fnode->ea_size_s)); 137 136 } 138 137 138 + static unsigned ea_valuelen(struct extended_attribute *ea) 139 + { 140 + return ea->valuelen_lo + 256 * ea->valuelen_hi; 141 + } 142 + 139 143 static inline struct extended_attribute *next_ea(struct extended_attribute *ea) 140 144 { 141 - return (struct extended_attribute *)((char *)ea + 5 + ea->namelen + le16_to_cpu(ea->valuelen)); 145 + return (struct extended_attribute *)((char *)ea + 5 + ea->namelen + ea_valuelen(ea)); 142 146 } 143 147 144 148 static inline secno ea_sec(struct extended_attribute *ea) 145 149 { 146 - return le32_to_cpu(*((secno *)((char *)ea + 9 + ea->namelen))); 150 + return le32_to_cpu(get_unaligned((secno *)((char *)ea + 9 + ea->namelen))); 147 151 } 148 152 149 153 static inline secno ea_len(struct extended_attribute *ea) 150 154 { 151 - return le32_to_cpu(*((secno *)((char *)ea + 5 + ea->namelen))); 155 + return le32_to_cpu(get_unaligned((secno *)((char *)ea + 5 + ea->namelen))); 152 156 } 153 157 154 158 static inline char *ea_data(struct extended_attribute *ea)