diff options
| author |   Richard Weinberger <richard@nod.at> | 2014-07-20 13:09:15 +0200 |
|---|---|---|
| committer | Richard Weinberger <richard@nod.at> | 2014-07-20 13:09:15 +0200 |
| commit | 284e6d39516cc7f9fbceebb259849fcb41559a7b (patch) | |
| tree | b921cdd0911583d68e3de7fb48a9ef67b0883bd6 /arch | |
| parent | Revert "um: Fix wait_stub_done() error handling" (diff) | |
| download | linux-dev-284e6d39516cc7f9fbceebb259849fcb41559a7b.tar.xz linux-dev-284e6d39516cc7f9fbceebb259849fcb41559a7b.zip | |
um: Ensure that a stub page cannot get unmapped
Trinity discovered an execution path such that a task
can unmap his stub page.
Reported-by: Toralf Förster <toralf.foerster@gmx.de>
Signed-off-by: Richard Weinberger <richard@nod.at>
Diffstat (limited to 'arch')
| -rw-r--r-- | arch/um/kernel/tlb.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/arch/um/kernel/tlb.c b/arch/um/kernel/tlb.c index 9472079471bb..1fc619e5dfe9 100644 --- a/arch/um/kernel/tlb.c +++ b/arch/um/kernel/tlb.c @@ -124,6 +124,9 @@ static int add_munmap(unsigned long addr, unsigned long len, struct host_vm_op *last; int ret = 0; + if ((addr >= STUB_START) && (addr < STUB_END)) + return -EINVAL; + if (hvc->index != 0) { last = &hvc->ops[hvc->index - 1]; if ((last->type == MUNMAP) && |