tree 8003dc4f8cdfed7de229c5d2e2843d72698c3027
parent 4d13be8b8b817cbca7db2f880628d7ae5b74799f
author Peter Maydell <peter.maydell@linaro.org> 1400161223 +0100
committer Riku Voipio <riku.voipio@linaro.org> 1402986101 +0300

linux-user: Don't overrun guest buffer in sched_getaffinity

If the guest's "long" type is smaller than the host's, then
our sched_getaffinity wrapper needs to round the buffer size
up to a multiple of the host sizeof(long). This means that when
we copy the data back from the host buffer to the guest's
buffer there might be more than we can fit. Rather than
overflowing the guest's buffer, handle this case by returning
EINVAL or ignoring the unused extra space, as appropriate.

Note that only guests using the syscall interface directly might
run into this bug -- the glibc wrappers around it will always
use a buffer whose size is a multiple of 8 regardless of guest
architecture.

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Riku Voipio <riku.voipio@linaro.org>