From: Mikulas Patocka <mpato...@redhat.com> The code in setup_rt_frame reads two words at haddr, but locks only one. This patch fixes it to lock both.
Signed-off-by: Mikulas Patocka <mpato...@redhat.com> Acked-by: Helge Deller <del...@gmx.de> Cc: qemu-sta...@nongnu.org Signed-off-by: Helge Deller <del...@gmx.de> --- linux-user/hppa/signal.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/linux-user/hppa/signal.c b/linux-user/hppa/signal.c index 3a976ac693..bda6e54655 100644 --- a/linux-user/hppa/signal.c +++ b/linux-user/hppa/signal.c @@ -149,12 +149,13 @@ void setup_rt_frame(int sig, struct target_sigaction *ka, target_ulong *fdesc, dest; haddr &= -4; - if (!lock_user_struct(VERIFY_READ, fdesc, haddr, 1)) { + fdesc = lock_user(VERIFY_READ, haddr, 2 * sizeof(target_ulong), 1); + if (!fdesc) { goto give_sigsegv; } __get_user(dest, fdesc); __get_user(env->gr[19], fdesc + 1); - unlock_user_struct(fdesc, haddr, 1); + unlock_user(fdesc, haddr, 0); haddr = dest; } env->iaoq_f = haddr; -- 2.41.0