Christopher Ferris fdfcfce7c6 Fix over read in strcpy/stpcpy/strcat.
This bug will happen when these circumstances are met:

- Destination address & 0x7 == 1, strlen of src is 11, 12, 13.
- Destination address & 0x7 == 2, strlen of src is 10, 11, 12.
- Destination address & 0x7 == 3, strlen of src is 9, 10, 11.
- Destination address & 0x7 == 4, strlen of src is 8, 9, 10.

In these cases, the dest alignment code does a ldr which reads 4 bytes,
and it will read past the end of the source. In most cases, this is
probably benign, but if this crosses into a new page it could cause a
crash.

Fix the labels in the cortex-a9 strcat.

Modify the overread test to vary the dst alignment to expost this bug.
Also, shrink the strcat/strlcat overread cases since the dst alignment
variation increases the runtime too much.

Bug: 24345899
Change-Id: Ib34a559bfcebd89861985b29cae6c1e47b5b5855
2015-09-24 14:17:36 -07:00
..
2015-02-14 00:56:46 +08:00
2015-06-16 13:57:54 -07:00
2015-09-01 15:40:38 -07:00
2013-12-03 18:42:41 -08:00
2014-11-06 11:16:55 -08:00
2015-01-26 11:57:11 -08:00
2014-09-11 08:45:46 -07:00
2013-02-01 14:51:19 -08:00
2014-08-22 10:23:12 -07:00
2015-02-14 00:56:46 +08:00
2015-02-14 00:56:46 +08:00
2014-12-03 15:55:34 -08:00
2014-04-10 20:44:27 -07:00
2014-02-21 16:27:21 +00:00
2015-01-21 10:33:30 -08:00
2014-11-06 14:14:37 -08:00
2015-07-21 19:33:34 -07:00
2014-12-04 11:01:28 -08:00
2015-06-15 14:33:54 -07:00
2014-01-03 14:49:37 -08:00
2015-08-26 14:48:55 -07:00
2015-04-06 19:05:58 -07:00
2014-12-03 15:55:34 -08:00