2005-04-16 16:20:36 -06:00
|
|
|
#ifndef _M68K_BITOPS_H
|
|
|
|
#define _M68K_BITOPS_H
|
|
|
|
/*
|
|
|
|
* Copyright 1992, Linus Torvalds.
|
|
|
|
*
|
|
|
|
* This file is subject to the terms and conditions of the GNU General Public
|
|
|
|
* License. See the file COPYING in the main directory of this archive
|
|
|
|
* for more details.
|
|
|
|
*/
|
|
|
|
|
2007-10-19 00:40:26 -06:00
|
|
|
#ifndef _LINUX_BITOPS_H
|
|
|
|
#error only <linux/bitops.h> can be included directly
|
|
|
|
#endif
|
|
|
|
|
2005-04-16 16:20:36 -06:00
|
|
|
#include <linux/compiler.h>
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Require 68020 or better.
|
|
|
|
*
|
|
|
|
* They use the standard big-endian m680x0 bit ordering.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#define test_and_set_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_test_and_set_bit(nr, vaddr) : \
|
|
|
|
__generic_test_and_set_bit(nr, vaddr))
|
|
|
|
|
|
|
|
#define __test_and_set_bit(nr,vaddr) test_and_set_bit(nr,vaddr)
|
|
|
|
|
|
|
|
static inline int __constant_test_and_set_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bset %2,%1; sne %0"
|
|
|
|
: "=d" (retval), "+m" (*p)
|
|
|
|
: "di" (nr & 7));
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int __generic_test_and_set_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfset %2{%1:#1}; sne %0"
|
|
|
|
: "=d" (retval) : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
#define set_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_set_bit(nr, vaddr) : \
|
|
|
|
__generic_set_bit(nr, vaddr))
|
|
|
|
|
|
|
|
#define __set_bit(nr,vaddr) set_bit(nr,vaddr)
|
|
|
|
|
|
|
|
static inline void __constant_set_bit(int nr, volatile unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
__asm__ __volatile__ ("bset %1,%0"
|
|
|
|
: "+m" (*p) : "di" (nr & 7));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline void __generic_set_bit(int nr, volatile unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
__asm__ __volatile__ ("bfset %1{%0:#1}"
|
|
|
|
: : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
}
|
|
|
|
|
|
|
|
#define test_and_clear_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_test_and_clear_bit(nr, vaddr) : \
|
|
|
|
__generic_test_and_clear_bit(nr, vaddr))
|
|
|
|
|
|
|
|
#define __test_and_clear_bit(nr,vaddr) test_and_clear_bit(nr,vaddr)
|
|
|
|
|
|
|
|
static inline int __constant_test_and_clear_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bclr %2,%1; sne %0"
|
|
|
|
: "=d" (retval), "+m" (*p)
|
|
|
|
: "di" (nr & 7));
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int __generic_test_and_clear_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfclr %2{%1:#1}; sne %0"
|
|
|
|
: "=d" (retval) : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* clear_bit() doesn't provide any barrier for the compiler.
|
|
|
|
*/
|
|
|
|
#define smp_mb__before_clear_bit() barrier()
|
|
|
|
#define smp_mb__after_clear_bit() barrier()
|
|
|
|
|
|
|
|
#define clear_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_clear_bit(nr, vaddr) : \
|
|
|
|
__generic_clear_bit(nr, vaddr))
|
|
|
|
#define __clear_bit(nr,vaddr) clear_bit(nr,vaddr)
|
|
|
|
|
|
|
|
static inline void __constant_clear_bit(int nr, volatile unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
__asm__ __volatile__ ("bclr %1,%0"
|
|
|
|
: "+m" (*p) : "di" (nr & 7));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline void __generic_clear_bit(int nr, volatile unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
__asm__ __volatile__ ("bfclr %1{%0:#1}"
|
|
|
|
: : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
}
|
|
|
|
|
|
|
|
#define test_and_change_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_test_and_change_bit(nr, vaddr) : \
|
|
|
|
__generic_test_and_change_bit(nr, vaddr))
|
|
|
|
|
|
|
|
#define __test_and_change_bit(nr,vaddr) test_and_change_bit(nr,vaddr)
|
|
|
|
#define __change_bit(nr,vaddr) change_bit(nr,vaddr)
|
|
|
|
|
|
|
|
static inline int __constant_test_and_change_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bchg %2,%1; sne %0"
|
|
|
|
: "=d" (retval), "+m" (*p)
|
|
|
|
: "di" (nr & 7));
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int __generic_test_and_change_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char retval;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfchg %2{%1:#1}; sne %0"
|
|
|
|
: "=d" (retval) : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
|
|
|
|
return retval;
|
|
|
|
}
|
|
|
|
|
|
|
|
#define change_bit(nr,vaddr) \
|
|
|
|
(__builtin_constant_p(nr) ? \
|
|
|
|
__constant_change_bit(nr, vaddr) : \
|
|
|
|
__generic_change_bit(nr, vaddr))
|
|
|
|
|
|
|
|
static inline void __constant_change_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
char *p = (char *)vaddr + (nr ^ 31) / 8;
|
|
|
|
__asm__ __volatile__ ("bchg %1,%0"
|
|
|
|
: "+m" (*p) : "di" (nr & 7));
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline void __generic_change_bit(int nr, unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
__asm__ __volatile__ ("bfchg %1{%0:#1}"
|
|
|
|
: : "d" (nr^31), "o" (*vaddr) : "memory");
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int test_bit(int nr, const unsigned long *vaddr)
|
|
|
|
{
|
|
|
|
return (vaddr[nr >> 5] & (1UL << (nr & 31))) != 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int find_first_zero_bit(const unsigned long *vaddr,
|
|
|
|
unsigned size)
|
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr;
|
|
|
|
int res = 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
unsigned int words;
|
2005-04-16 16:20:36 -06:00
|
|
|
unsigned long num;
|
|
|
|
|
|
|
|
if (!size)
|
|
|
|
return 0;
|
|
|
|
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
words = (size + 31) >> 5;
|
2005-04-16 16:20:36 -06:00
|
|
|
while (!(num = ~*p++)) {
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (!--words)
|
2005-04-16 16:20:36 -06:00
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfffo %1{#0,#0},%0"
|
|
|
|
: "=d" (res) : "d" (num & -num));
|
|
|
|
res ^= 31;
|
|
|
|
out:
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
res += ((long)p - (long)vaddr - 4) * 8;
|
|
|
|
return res < size ? res : size;
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_first_zero_bit find_first_zero_bit
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
static inline int find_next_zero_bit(const unsigned long *vaddr, int size,
|
|
|
|
int offset)
|
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr + (offset >> 5);
|
|
|
|
int bit = offset & 31UL, res;
|
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
|
|
|
|
|
|
|
if (bit) {
|
|
|
|
unsigned long num = ~*p++ & (~0UL << bit);
|
|
|
|
offset -= bit;
|
|
|
|
|
|
|
|
/* Look for zero in first longword */
|
|
|
|
__asm__ __volatile__ ("bfffo %1{#0,#0},%0"
|
|
|
|
: "=d" (res) : "d" (num & -num));
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (res < 32) {
|
|
|
|
offset += res ^ 31;
|
|
|
|
return offset < size ? offset : size;
|
|
|
|
}
|
2005-04-16 16:20:36 -06:00
|
|
|
offset += 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
|
|
|
/* No zero yet, search remaining full bytes for a zero */
|
2011-04-03 05:32:00 -06:00
|
|
|
return offset + find_first_zero_bit(p, size - offset);
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_next_zero_bit find_next_zero_bit
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
static inline int find_first_bit(const unsigned long *vaddr, unsigned size)
|
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr;
|
|
|
|
int res = 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
unsigned int words;
|
2005-04-16 16:20:36 -06:00
|
|
|
unsigned long num;
|
|
|
|
|
|
|
|
if (!size)
|
|
|
|
return 0;
|
|
|
|
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
words = (size + 31) >> 5;
|
2005-04-16 16:20:36 -06:00
|
|
|
while (!(num = *p++)) {
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (!--words)
|
2005-04-16 16:20:36 -06:00
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfffo %1{#0,#0},%0"
|
|
|
|
: "=d" (res) : "d" (num & -num));
|
|
|
|
res ^= 31;
|
|
|
|
out:
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
res += ((long)p - (long)vaddr - 4) * 8;
|
|
|
|
return res < size ? res : size;
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_first_bit find_first_bit
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
static inline int find_next_bit(const unsigned long *vaddr, int size,
|
|
|
|
int offset)
|
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr + (offset >> 5);
|
|
|
|
int bit = offset & 31UL, res;
|
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
|
|
|
|
|
|
|
if (bit) {
|
|
|
|
unsigned long num = *p++ & (~0UL << bit);
|
|
|
|
offset -= bit;
|
|
|
|
|
|
|
|
/* Look for one in first longword */
|
|
|
|
__asm__ __volatile__ ("bfffo %1{#0,#0},%0"
|
|
|
|
: "=d" (res) : "d" (num & -num));
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (res < 32) {
|
|
|
|
offset += res ^ 31;
|
|
|
|
return offset < size ? offset : size;
|
|
|
|
}
|
2005-04-16 16:20:36 -06:00
|
|
|
offset += 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
|
|
|
/* No one yet, search remaining full bytes for a one */
|
2011-04-03 05:32:00 -06:00
|
|
|
return offset + find_first_bit(p, size - offset);
|
2005-04-16 16:20:36 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_next_bit find_next_bit
|
2005-04-16 16:20:36 -06:00
|
|
|
|
|
|
|
/*
|
|
|
|
* ffz = Find First Zero in word. Undefined if no zero exists,
|
|
|
|
* so code should check against ~0UL first..
|
|
|
|
*/
|
|
|
|
static inline unsigned long ffz(unsigned long word)
|
|
|
|
{
|
|
|
|
int res;
|
|
|
|
|
|
|
|
__asm__ __volatile__ ("bfffo %1{#0,#0},%0"
|
|
|
|
: "=d" (res) : "d" (~word & -~word));
|
|
|
|
return res ^ 31;
|
|
|
|
}
|
|
|
|
|
|
|
|
#ifdef __KERNEL__
|
|
|
|
|
|
|
|
/*
|
|
|
|
* ffs: find first bit set. This is defined the same way as
|
|
|
|
* the libc and compiler builtin ffs routines, therefore
|
|
|
|
* differs in spirit from the above ffz (man ffs).
|
|
|
|
*/
|
|
|
|
|
|
|
|
static inline int ffs(int x)
|
|
|
|
{
|
|
|
|
int cnt;
|
|
|
|
|
|
|
|
asm ("bfffo %1{#0:#0},%0" : "=d" (cnt) : "dm" (x & -x));
|
|
|
|
|
|
|
|
return 32 - cnt;
|
|
|
|
}
|
|
|
|
#define __ffs(x) (ffs(x) - 1)
|
|
|
|
|
|
|
|
/*
|
|
|
|
* fls: find last bit set.
|
|
|
|
*/
|
|
|
|
|
|
|
|
static inline int fls(int x)
|
|
|
|
{
|
|
|
|
int cnt;
|
|
|
|
|
|
|
|
asm ("bfffo %1{#0,#0},%0" : "=d" (cnt) : "dm" (x));
|
|
|
|
|
|
|
|
return 32 - cnt;
|
|
|
|
}
|
|
|
|
|
2008-12-31 16:42:18 -07:00
|
|
|
static inline int __fls(int x)
|
|
|
|
{
|
|
|
|
return fls(x) - 1;
|
|
|
|
}
|
|
|
|
|
2006-03-26 02:39:27 -07:00
|
|
|
#include <asm-generic/bitops/fls64.h>
|
|
|
|
#include <asm-generic/bitops/sched.h>
|
|
|
|
#include <asm-generic/bitops/hweight.h>
|
2007-10-18 04:06:39 -06:00
|
|
|
#include <asm-generic/bitops/lock.h>
|
2005-04-16 16:20:36 -06:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
/* Bitmap functions for the little endian bitmap. */
|
|
|
|
|
|
|
|
static inline void __set_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
__set_bit(nr ^ 24, addr);
|
|
|
|
}
|
2005-04-16 16:20:36 -06:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline void __clear_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
__clear_bit(nr ^ 24, addr);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int __test_and_set_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
return __test_and_set_bit(nr ^ 24, addr);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int test_and_set_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
return test_and_set_bit(nr ^ 24, addr);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int __test_and_clear_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
return __test_and_clear_bit(nr ^ 24, addr);
|
|
|
|
}
|
2005-04-16 16:20:36 -06:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline int test_and_clear_bit_le(int nr, void *addr)
|
|
|
|
{
|
|
|
|
return test_and_clear_bit(nr ^ 24, addr);
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline int test_bit_le(int nr, const void *vaddr)
|
2006-03-26 02:39:28 -07:00
|
|
|
{
|
|
|
|
const unsigned char *p = vaddr;
|
|
|
|
return (p[nr >> 3] & (1U << (nr & 7))) != 0;
|
|
|
|
}
|
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline int find_first_zero_bit_le(const void *vaddr, unsigned size)
|
2006-03-26 02:39:28 -07:00
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr, *addr = vaddr;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
int res = 0;
|
|
|
|
unsigned int words;
|
2006-03-26 02:39:28 -07:00
|
|
|
|
|
|
|
if (!size)
|
|
|
|
return 0;
|
|
|
|
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
words = (size >> 5) + ((size & 31) > 0);
|
|
|
|
while (*p++ == ~0UL) {
|
|
|
|
if (--words == 0)
|
|
|
|
goto out;
|
2006-03-26 02:39:28 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
--p;
|
|
|
|
for (res = 0; res < 32; res++)
|
2011-03-23 17:41:58 -06:00
|
|
|
if (!test_bit_le(res, p))
|
2006-03-26 02:39:28 -07:00
|
|
|
break;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
out:
|
|
|
|
res += (p - addr) * 32;
|
|
|
|
return res < size ? res : size;
|
2006-03-26 02:39:28 -07:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_first_zero_bit_le find_first_zero_bit_le
|
2006-03-26 02:39:28 -07:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline unsigned long find_next_zero_bit_le(const void *addr,
|
2010-02-28 05:06:27 -07:00
|
|
|
unsigned long size, unsigned long offset)
|
2006-03-26 02:39:28 -07:00
|
|
|
{
|
2011-03-23 17:41:58 -06:00
|
|
|
const unsigned long *p = addr;
|
2006-03-26 02:39:28 -07:00
|
|
|
int bit = offset & 31UL, res;
|
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
p += offset >> 5;
|
|
|
|
|
2006-03-26 02:39:28 -07:00
|
|
|
if (bit) {
|
2011-03-23 17:41:58 -06:00
|
|
|
offset -= bit;
|
2006-03-26 02:39:28 -07:00
|
|
|
/* Look for zero in first longword */
|
|
|
|
for (res = bit; res < 32; res++)
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (!test_bit_le(res, p)) {
|
|
|
|
offset += res;
|
|
|
|
return offset < size ? offset : size;
|
|
|
|
}
|
2006-03-26 02:39:28 -07:00
|
|
|
p++;
|
2011-03-23 17:41:58 -06:00
|
|
|
offset += 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
2006-03-26 02:39:28 -07:00
|
|
|
}
|
|
|
|
/* No zero yet, search remaining full bytes for a zero */
|
2011-03-23 17:41:58 -06:00
|
|
|
return offset + find_first_zero_bit_le(p, size - offset);
|
2006-03-26 02:39:28 -07:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_next_zero_bit_le find_next_zero_bit_le
|
2008-06-12 16:21:29 -06:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline int find_first_bit_le(const void *vaddr, unsigned size)
|
2008-06-12 16:21:29 -06:00
|
|
|
{
|
|
|
|
const unsigned long *p = vaddr, *addr = vaddr;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
int res = 0;
|
|
|
|
unsigned int words;
|
2008-06-12 16:21:29 -06:00
|
|
|
|
|
|
|
if (!size)
|
|
|
|
return 0;
|
|
|
|
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
words = (size >> 5) + ((size & 31) > 0);
|
2008-06-12 16:21:29 -06:00
|
|
|
while (*p++ == 0UL) {
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (--words == 0)
|
|
|
|
goto out;
|
2008-06-12 16:21:29 -06:00
|
|
|
}
|
|
|
|
|
|
|
|
--p;
|
|
|
|
for (res = 0; res < 32; res++)
|
2011-03-23 17:41:58 -06:00
|
|
|
if (test_bit_le(res, p))
|
2008-06-12 16:21:29 -06:00
|
|
|
break;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
out:
|
|
|
|
res += (p - addr) * 32;
|
|
|
|
return res < size ? res : size;
|
2008-06-12 16:21:29 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_first_bit_le find_first_bit_le
|
2008-06-12 16:21:29 -06:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
static inline unsigned long find_next_bit_le(const void *addr,
|
2010-02-28 05:06:27 -07:00
|
|
|
unsigned long size, unsigned long offset)
|
2008-06-12 16:21:29 -06:00
|
|
|
{
|
2011-03-23 17:41:58 -06:00
|
|
|
const unsigned long *p = addr;
|
2008-06-12 16:21:29 -06:00
|
|
|
int bit = offset & 31UL, res;
|
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
p += offset >> 5;
|
|
|
|
|
2008-06-12 16:21:29 -06:00
|
|
|
if (bit) {
|
2011-03-23 17:41:58 -06:00
|
|
|
offset -= bit;
|
2008-06-12 16:21:29 -06:00
|
|
|
/* Look for one in first longword */
|
|
|
|
for (res = bit; res < 32; res++)
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
if (test_bit_le(res, p)) {
|
|
|
|
offset += res;
|
|
|
|
return offset < size ? offset : size;
|
|
|
|
}
|
2008-06-12 16:21:29 -06:00
|
|
|
p++;
|
2011-03-23 17:41:58 -06:00
|
|
|
offset += 32;
|
m68k: bitops - Never step beyond the end of the bitmap
find_next bitops on m68k (find_next_zero_bit, find_next_bit, and
find_next_bit_le) may cause out of bounds memory access
when the bitmap size in bits % 32 != 0 and offset (the bitnumber
to start searching at) is very close to the bitmap size.
For example,
unsigned long bitmap[2] = { 0, 0 };
find_next_bit(bitmap, 63, 62);
1. find_next_bit() tries to find any set bits in bitmap[1],
but no bits set.
2. Then find_first_bit(bimap + 2, -1)
3. Unfortunately find_first_bit() takes unsigned int as the size argument.
4. find_first_bit will access bitmap[2~] until it find any set bits.
Add missing tests for stepping beyond the end of the bitmap to all
find_{first,next}_*() functions, and make sure they never return a value
larger than the bitmap size.
Reported-by: Akinobu Mita <akinobu.mita@gmail.com>
Cc: Andreas Schwab <schwab@linux-m68k.org>
Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
2011-04-03 06:00:10 -06:00
|
|
|
|
|
|
|
if (offset >= size)
|
|
|
|
return size;
|
2008-06-12 16:21:29 -06:00
|
|
|
}
|
|
|
|
/* No set bit yet, search remaining full bytes for a set bit */
|
2011-03-23 17:41:58 -06:00
|
|
|
return offset + find_first_bit_le(p, size - offset);
|
2008-06-12 16:21:29 -06:00
|
|
|
}
|
2011-05-26 17:26:06 -06:00
|
|
|
#define find_next_bit_le find_next_bit_le
|
2006-03-26 02:39:28 -07:00
|
|
|
|
2011-03-23 17:41:58 -06:00
|
|
|
/* Bitmap functions for the ext2 filesystem. */
|
|
|
|
|
|
|
|
#define ext2_set_bit_atomic(lock, nr, addr) \
|
|
|
|
test_and_set_bit_le(nr, addr)
|
|
|
|
#define ext2_clear_bit_atomic(lock, nr, addr) \
|
|
|
|
test_and_clear_bit_le(nr, addr)
|
|
|
|
|
2005-04-16 16:20:36 -06:00
|
|
|
#endif /* __KERNEL__ */
|
|
|
|
|
|
|
|
#endif /* _M68K_BITOPS_H */
|