2001-11-02 07:30:54

by Ken Ashcraft

[permalink] [raw]
Subject: null pointer questions

Two questions:
1. If I pass size 0 to kmalloc, what does it return?

2. What happens if I pass a null pointer as the destination parameter
to copy_from_user? Does copy_from_user handle it safely or will the
kernel seg fault?

Thanks for your answers,
Ken Ashcraft


2001-11-02 12:52:01

by Roman Zippel

[permalink] [raw]
Subject: Re: null pointer questions

Hi,

On Thu, 1 Nov 2001, Ken Ashcraft wrote:

> 1. If I pass size 0 to kmalloc, what does it return?

AFAIK size is always rounded up, so you get the smallest possible
allocation unit.

> 2. What happens if I pass a null pointer as the destination parameter
> to copy_from_user? Does copy_from_user handle it safely or will the
> kernel seg fault?

The kernel won't crash, but it might fail (depending on whether 0 is a
valid user space address or not).

bye, Roman


2001-11-02 13:17:52

by Tommi Kyntola

[permalink] [raw]
Subject: Re: null pointer questions

On Fri, 2 Nov 2001, Roman Zippel wrote:

> Hi,
>
> On Thu, 1 Nov 2001, Ken Ashcraft wrote:
>
> > 1. If I pass size 0 to kmalloc, what does it return?
>
> AFAIK size is always rounded up, so you get the smallest possible
> allocation unit.
>
> > 2. What happens if I pass a null pointer as the destination parameter
> > to copy_from_user? Does copy_from_user handle it safely or will the
> > kernel seg fault?
>
> The kernel won't crash, but it might fail (depending on whether 0 is a
> valid user space address or not).
>
> bye, Roman
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to [email protected]
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
>

2001-11-02 22:43:33

by Ken Ashcraft

[permalink] [raw]
Subject: Re: null pointer questions

> > 2. What happens if I pass a null pointer as the destination parameter
> > to copy_from_user? Does copy_from_user handle it safely or will the
> > kernel seg fault?
>
> The kernel won't crash, but it might fail (depending on whether 0 is a
> valid user space address or not).

Why does it matter if 0 is a valid user space or not? If I make the call

copy_from_user(0, user_ptr, 4);

the null pointer is the kernel address, not the user address. Can you
clarify please?

Thanks
Ken

2001-11-02 23:21:16

by Roman Zippel

[permalink] [raw]
Subject: Re: null pointer questions

Hi,

Ken Ashcraft wrote:

> Why does it matter if 0 is a valid user space or not? If I make the call
>
> copy_from_user(0, user_ptr, 4);
>
> the null pointer is the kernel address, not the user address. Can you
> clarify please?

Sorry, I misunderstood you. The kernel address has to be a valid address
of course, otherwise the behavior is undefined.

bye, Roman

2001-11-02 23:39:55

by Brian Gerst

[permalink] [raw]
Subject: Re: null pointer questions

Ken Ashcraft wrote:
>
> > > 2. What happens if I pass a null pointer as the destination parameter
> > > to copy_from_user? Does copy_from_user handle it safely or will the
> > > kernel seg fault?
> >
> > The kernel won't crash, but it might fail (depending on whether 0 is a
> > valid user space address or not).
>
> Why does it matter if 0 is a valid user space or not? If I make the call
>
> copy_from_user(0, user_ptr, 4);
>
> the null pointer is the kernel address, not the user address. Can you
> clarify please?

copy_from_user uses the string move instruction on the x86, so the
exception code would assume the source faulted not the dest. It would
return -EFAULT instead of causing an oops.

--

Brian Gerst

2001-11-02 23:42:35

by Brian Gerst

[permalink] [raw]
Subject: Re: null pointer questions

Brian Gerst wrote:
>
> Ken Ashcraft wrote:
> >
> > > > 2. What happens if I pass a null pointer as the destination parameter
> > > > to copy_from_user? Does copy_from_user handle it safely or will the
> > > > kernel seg fault?
> > >
> > > The kernel won't crash, but it might fail (depending on whether 0 is a
> > > valid user space address or not).
> >
> > Why does it matter if 0 is a valid user space or not? If I make the call
> >
> > copy_from_user(0, user_ptr, 4);
> >
> > the null pointer is the kernel address, not the user address. Can you
> > clarify please?
>
> copy_from_user uses the string move instruction on the x86, so the
> exception code would assume the source faulted not the dest. It would
> return -EFAULT instead of causing an oops.

Err, would return non-zero instead of -EFAULT.

--

Brian Gerst