remove %n printf format specifier support from vsprintf.c

diff -Naurb -X /home/muli/w/dontdiff linux-2.5/arch/cris/arch-v10/kernel/setup.c 2.6.5-rc3-pn/arch/cris/arch-v10/kernel/setup.c
@@ -52,6 +52,7 @@
 {
 	unsigned long revision;
 	struct cpu_info *info;
+	int i;
 
 	/* read the version register in the CPU and print some stuff */
 

@@ -62,7 +63,7 @@
 	else
 		info = &cpu_info[revision];
 
-	return seq_printf(m,
+	i = seq_printf(m,
 		       "processor\t: 0\n" 
 		       "cpu\t\t: CRIS\n"
 		       "cpu revision\t: %lu\n"

@@ -91,6 +92,7 @@
 		       info->flags & HAS_USB ? "yes" : "no",
 		       (loops_per_jiffy * HZ + 500) / 500000,
 		       ((loops_per_jiffy * HZ + 500) / 5000) % 100);
+	return (i < 0) ? i : 0;
 }
 
 #endif /* CONFIG_PROC_FS */

diff -Naurb -X /home/muli/w/dontdiff linux-2.5/arch/i386/kernel/cpu/mtrr/if.c 2.6.5-rc3-pn/arch/i386/kernel/cpu/mtrr/if.c
@@ -320,12 +320,11 @@
 static int mtrr_seq_show(struct seq_file *seq, void *offset)
 {
 	char factor;
-	int i, max, len;
+	int i, max;
 	mtrr_type type;
 	unsigned long base;
 	unsigned int size;
 
-	len = 0;
 	max = num_var_ranges;
 	for (i = 0; i < max; i++) {
 		mtrr_if->get(i, &base, &size, &type);

@@ -341,7 +340,7 @@
 				size >>= 20 - PAGE_SHIFT;
 			}
 			/* RED-PEN: base can be > 32bit */ 
-			len += seq_printf(seq, 
+			seq_printf(seq,
 				   "reg%02i: base=0x%05lx000 (%4liMB), size=%4i%cB: %s, count=%d\n",
 			     i, base, base >> (20 - PAGE_SHIFT), size, factor,
 			     mtrr_attrib_to_str(type), usage_table[i]);

diff -Naurb -X /home/muli/w/dontdiff linux-2.5/fs/proc/task_mmu.c 2.6.5-rc3-pn/fs/proc/task_mmu.c
@@ -91,7 +91,7 @@
 		ino = inode->i_ino;
 	}
 
-	seq_printf(m, "%08lx-%08lx %c%c%c%c %08lx %02x:%02x %lu %n",
+	len = seq_printf(m, "%08lx-%08lx %c%c%c%c %08lx %02x:%02x %lu ",
 			map->vm_start,
 			map->vm_end,
 			flags & VM_READ ? 'r' : '-',

@@ -99,7 +99,9 @@
 			flags & VM_EXEC ? 'x' : '-',
 			flags & VM_MAYSHARE ? 's' : 'p',
 			map->vm_pgoff << PAGE_SHIFT,
-			MAJOR(dev), MINOR(dev), ino, &len);
+			MAJOR(dev), MINOR(dev), ino);
+	if (len < 0)
+		return 0;
 
 	if (map->vm_file) {
 		len = 25 + sizeof(void*) * 6 - len;

diff -Naurb -X /home/muli/w/dontdiff linux-2.5/fs/seq_file.c 2.6.5-rc3-pn/fs/seq_file.c
@@ -290,6 +290,16 @@
 
 EXPORT_SYMBOL(seq_escape);
 
+/**
+ *	seq_printf -	Format a string and place it in a buffer
+ *	@m:	Target buffer
+ *	@f:	Printf format string
+ *      @...:   Arguments for the format string
+ *
+ * The return value is the number of characters which have been written into
+ * the buffer @m not including the trailing '\0'. If the buffer is too small,
+ * -1 is returned.
+ */
 int seq_printf(struct seq_file *m, const char *f, ...)
 {
 	va_list args;

@@ -297,11 +307,11 @@
 
 	if (m->count < m->size) {
 		va_start(args, f);
-		len = vsnprintf(m->buf + m->count, m->size - m->count, f, args);
+		len = vscnprintf(m->buf + m->count, m->size - m->count, f, args);
 		va_end(args);
 		if (m->count + len < m->size) {
 			m->count += len;
-			return 0;
+			return len;
 		}
 	}
 	m->count = m->size;

diff -Naurb -X /home/muli/w/dontdiff linux-2.5/lib/vsprintf.c 2.6.5-rc3-pn/lib/vsprintf.c
@@ -14,6 +14,9 @@
  * - changed to provide snprintf and vsnprintf functions
  * So Feb  1 16:51:32 CET 2004 Juergen Quade <[email protected]>
  * - scnprintf and vscnprintf
+ * Sat Mar 20 22:38:09 2004 Muli Ben-Yehuda <[email protected]>
+ * - remove '%n' support from vsnprintf, as nothing is using it, and it 
+ *   has very few legitimate uses (and many many illegitimate ones)
  */
 
 #include <stdarg.h>

@@ -401,22 +404,6 @@
 						16, field_width, precision, flags);
 				continue;
 
-
-			case 'n':
-				/* FIXME:
-				* What does C99 say about the overflow case here? */
-				if (qualifier == 'l') {
-					long * ip = va_arg(args, long *);
-					*ip = (str - buf);
-				} else if (qualifier == 'Z' || qualifier == 'z') {
-					size_t * ip = va_arg(args, size_t *);
-					*ip = (str - buf);
-				} else {
-					int * ip = va_arg(args, int *);
-					*ip = (str - buf);
-				}
-				continue;
-
 			case '%':
 				if (str <= end)
 					*str = '%';