From: Michal Januszewski <michalj@gmail.com>
To: Andreas Schwab <schwab@redhat.com>
Cc: linux-kernel@vger.kernel.org
Subject: [PATCH] Make sure abs() works as expected with both ints and longs
Date: Wed, 28 Jul 2010 17:28:49 +0200 [thread overview]
Message-ID: <20100728152849.GA3728@quadria> (raw)
In-Reply-To: <m3eienu3ex.fsf@hase.home>
The abs() macro is commonly used to calculate the modulus of a difference
of two numbers. With the introduction of "long" inside the definition
of abs() in the commit a49c59c042c63b432307c1bbf7dac5a104c786e6, some of
the abs() calls in the kernel started returning unexpected values (for
instance, see abs() usage in drivers/video/modedb.c).
The problem is apparent if the argument of abs() is a difference of two
32-bit integers, at least one of which is unsigned. The result is then
assumed to be an unsigned integer, which gets cast to a positive long. The
return value of abs() is then this large positive integer, instead of the
expected small positive integer representing the modulus of the argument.
Example:
u32 a = 0, b = 1;
u32 c = abs(a - b);
'c' will end up with a value of 0xffffffff instead of the expected 0x1.
To fix this problem, modify the abs() macro so that it detects the size
of the argument, and if it's not larger than 32 bits, uses an int instead
of a long.
Signed-off-by: Michal Januszewski <michalj@gmail.com>
---
OK, please disregard my previous patch. How about this new one?
A solution with sizeof() was mentioned as a possibility in the original
discussion of a49c59c0, but it looks like it was never actually
presented and considered.
diff --git a/include/linux/kernel.h b/include/linux/kernel.h
index 8317ec4..bacefff 100644
--- a/include/linux/kernel.h
+++ b/include/linux/kernel.h
@@ -157,10 +157,14 @@ extern int _cond_resched(void);
#define might_sleep_if(cond) do { if (cond) might_sleep(); } while (0)
-#define abs(x) ({ \
- long __x = (x); \
- (__x < 0) ? -__x : __x; \
- })
+#define abs(x) ( \
+ (sizeof(x) <= 4) ? ({ \
+ int __x = (x); \
+ (__x < 0) ? -__x : __x; \
+ }) : ({ \
+ long __x = (x); \
+ (__x < 0) ? -__x : __x; \
+ }))
#ifdef CONFIG_PROVE_LOCKING
void might_fault(void);
prev parent reply other threads:[~2010-07-28 15:28 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-07-28 12:44 [PATCH] Make sure abs() always works on a signed argument Michal Januszewski
2010-07-28 13:44 ` Andreas Schwab
2010-07-28 15:28 ` Michal Januszewski [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100728152849.GA3728@quadria \
--to=michalj@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=schwab@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox