Re: [PATCH resend 3/5] libata-scsi: fix overflow in mode page copy
From: Tejun Heo
Date: Thu Jul 21 2016 - 17:17:31 EST
Hello,
On Fri, Jul 22, 2016 at 02:41:52AM +0800, tom.ty89@xxxxxxxxx wrote:
> From: Tom Yan <tom.ty89@xxxxxxxxx>
>
> ata_mselect_*() would initialize a char array for storing a copy of
> the current mode page. However, if char was actually signed char,
> overflow could occur.
Do you mean sign extension?
> For example, `0xff` from def_control_mpage[] would be "truncated"
> to `-1`. This prevented ata_mselect_control() from working at all,
> since when it did the read-only bits check, there would always be
> a mismatch.
Heh, the description doesn't really make sense. Are you talking about
something like the following?
char ar[N];
int i;
i = ar[x];
if (i == 0xff)
asdf;
If so, the description isn't quite right.
Thanks.
--
tejun