Re: [PATCH][RESEND] mm: Fix off-by-one bug in print_nodes_state

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



(12/18/11 5:44 PM), David Rientjes wrote:
On Sun, 18 Dec 2011, Ryota Ozaki wrote:

/sys/devices/system/node/{online,possible} involve a garbage byte
because print_nodes_state returns content size + 1. To fix the bug,
the patch changes the use of cpuset_sprintf_cpulist to follow the
use at other places, which is clearer and safer.


It's not a garbage byte, sysdev files use a buffer created with
get_zeroed_page(), so extra byte is guaranteed to be zero since
nodelist_scnprintf() won't write to it.  So the issue here is that
print_nodes_state() returns a size that is off by one according to
ISO C99 although it won't cause a problem in practice.

This bug was introduced since v2.6.24.


It's not a bug, the result of a 4-node system would be "0-3\n\0" and
returns 5 correctly.  You can verify this very simply with strace.

Usually, /sys files don't output trailing '¥0'. And, '¥0' is not regular
io friendly. So I can imagine some careless programmer think it is garbage. Is there any benefit to show trailing '¥0'?

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@xxxxxxxxx.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/
Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>


[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]