lkml.org 
[lkml]   [2007]   [Dec]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Signed divides vs shifts (Re: [Security] /dev/urandom uses uninit bytes, leaks user data)
On Mon, Dec 17, 2007 at 09:28:57AM -0800, Linus Torvalds wrote:
>
>
> On Sat, 15 Dec 2007, Herbert Xu wrote:
> >
> > There ought to be a warning about this sort of thing.
>
> We could add it to sparse. The appended (untested) patch seems to say
> there's a lot of those signed divides-by-power-of-twos.

I'm not sure that you are warning about the right things. If you want
a real nightmare scenario in that area, consider this:

int x[20];

int *p = x + n;
int *q = x + m;

p - q
((char *)p - (char *)q)/4
((char *)p - (char *)q)/sizeof(int)

The first two are equivalent on all targets we care about. However, an
attempt to make the second one "more portable" silently creates the
code that'll do something entirely different as soon as we get m > n...


\
 
 \ /
  Last update: 2007-12-17 18:51    [W:0.103 / U:0.052 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site