Re: BUG: mmapfile/writev spurious zero bytes (x86_64/not i386, bisected,reproducable)

From: Andi Kleen
Date: Tue Jun 17 2008 - 17:15:42 EST


Linus Torvalds wrote:
>
> On Tue, 17 Jun 2008, Linus Torvalds wrote:
>> I actually am starting to think that the bug is in
>> __copy_to_user_inatomic_nocache().
>
> Confirmed.
>
> The uncached user copies are totally broken. The number of bytes left
> uncopied is simply wrong, because of how it does that unrolled loop and
> doesn't account for the fact that just doing loads does not actually
> increase the number of bytes copied at all.

How can a load fault legitimately in copy_to_user?

-Andi


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/