You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Heiko Carstens ea81531de2 s390/uaccess: fix page table walk ... When translating user space addresses to kernel addresses the follow_table() function had two bugs: - PROT_NONE mappings could be read accessed via the kernel mapping. That is e.g. putting a filename into a user page, then protecting the page with PROT_NONE and afterwards issuing the "open" syscall with a pointer to the filename would incorrectly succeed. - when walking the page tables it used the pgd/pud/pmd/pte primitives which with dynamic page tables give no indication which real level of page tables is being walked (region2, region3, segment or page table). So in case of an exception the translation exception code passed to __handle_fault() is not necessarily correct. This is not really an issue since __handle_fault() doesn't evaluate the code. Only in case of e.g. a SIGBUS this code gets passed to user space. If user space can do something sane with the value is a different question though. To fix these issues don't use any Linux primitives. Only walk the page tables like the hardware would do it, however we leave quite some checks away since we know that we only have full size page tables and each index is within bounds. In theory this should fix all issues... Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com> Reviewed-by: Gerald Schaefer <gerald.schaefer@de.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>		12 years ago
..
Makefile	s390/string: provide asm lib functions for memcpy and memcmp	13 years ago
delay.c	s390/time: rename tod clock access functions	12 years ago
div64.c	s390/comments: unify copyright messages and remove file names	13 years ago
mem32.S	s390/string: provide asm lib functions for memcpy and memcmp	13 years ago
mem64.S	s390/string: provide asm lib functions for memcpy and memcmp	13 years ago
qrnnd.S	[S390] fix s390 assembler code alignments	14 years ago
spinlock.c	s390/comments: unify copyright messages and remove file names	13 years ago
string.c	s390/string: provide asm lib functions for memcpy and memcmp	13 years ago
uaccess.h	s390/comments: unify copyright messages and remove file names	13 years ago
uaccess_mvcos.c	s390/uaccess: fix strncpy_from_user/strnlen_user zero maxlen case	12 years ago
uaccess_pt.c	s390/uaccess: fix page table walk	12 years ago
uaccess_std.c	s390/uaccess: fix strncpy_from_user string length check	12 years ago
ucmpdi2.c	…
usercopy.c	…