Blame SOURCES/0006-evdev-fix-off-by-one-error-in-decode_bitset.patch

2eae47
From fdc95e89441ba6f2d39f5f6f3e2ac20933245b8d Mon Sep 17 00:00:00 2001
2eae47
From: Eugene Syromiatnikov <esyr@redhat.com>
2eae47
Date: Thu, 20 Dec 2018 16:35:27 +0100
2eae47
Subject: [PATCH 06/27] evdev: fix off-by-one error in decode_bitset
2eae47
2eae47
* evdev.c (decode_bitset): Decrement sorted/indexed xlat's size by one
2eae47
in order to account for guarding XLAT_END, as other sorted/indexed xlat
2eae47
wrappers do.
2eae47
2eae47
Fixes: v4.23~261 "evdev: support various types of xlats in decode_bitset"
2eae47
---
2eae47
 evdev.c | 2 +-
2eae47
 1 file changed, 1 insertion(+), 1 deletion(-)
2eae47
2eae47
diff --git a/evdev.c b/evdev.c
2eae47
index cae2ef1..957d0e2 100644
2eae47
--- a/evdev.c
2eae47
+++ b/evdev.c
2eae47
@@ -208,7 +208,7 @@ decode_bitset_(struct tcb *const tcp, const kernel_ulong_t arg,
2eae47
 
2eae47
 #define decode_bitset(tcp_, arg_, decode_nr_, max_nr_, dflt_, xt_) \
2eae47
 	decode_bitset_((tcp_), (arg_), (decode_nr_), (max_nr_), \
2eae47
-		       (dflt_), ARRAY_SIZE(decode_nr_), (xt_))
2eae47
+		       (dflt_), ARRAY_SIZE(decode_nr_) - 1, (xt_))
2eae47
 
2eae47
 # ifdef EVIOCGMTSLOTS
2eae47
 static int
2eae47
-- 
2eae47
2.1.4
2eae47