From: Vivek Kasireddy <vivek.kasire...@intel.com> [ Upstream commit 7d79cd784470395539bda91bf0b3505ff5b2ab6d ]
Add VM_PFNMAP to vm_flags in the mmap handler to ensure that the mappings would be managed without using struct page. And, in the vm_fault handler, use vmf_insert_pfn to share the page's pfn to userspace instead of directly sharing the page (via struct page *). Link: https://lkml.kernel.org/r/20240624063952.1572359-6-vivek.kasire...@intel.com Signed-off-by: Vivek Kasireddy <vivek.kasire...@intel.com> Suggested-by: David Hildenbrand <da...@redhat.com> Acked-by: David Hildenbrand <da...@redhat.com> Acked-by: Dave Airlie <airl...@redhat.com> Acked-by: Gerd Hoffmann <kra...@redhat.com> Cc: Daniel Vetter <daniel.vet...@ffwll.ch> Cc: Hugh Dickins <hu...@google.com> Cc: Peter Xu <pet...@redhat.com> Cc: Jason Gunthorpe <j...@nvidia.com> Cc: Dongwon Kim <dongwon....@intel.com> Cc: Junxiao Chang <junxiao.ch...@intel.com> Cc: Arnd Bergmann <a...@arndb.de> Cc: Christoph Hellwig <h...@infradead.org> Cc: Christoph Hellwig <h...@lst.de> Cc: Matthew Wilcox (Oracle) <wi...@infradead.org> Cc: Mike Kravetz <mike.krav...@oracle.com> Cc: Oscar Salvador <osalva...@suse.de> Cc: Shuah Khan <sh...@kernel.org> Signed-off-by: Andrew Morton <a...@linux-foundation.org> Reported-by: syzbot+3d218f7b6c5511a83...@syzkaller.appspotmail.com [ Andrey: Backport required minor change: replace call to vm_flags_set() in mmap_udmabuf() by direct modification of the vma->vm_flags, because the set of vm_flags_*() functions is not in this versions. ] Signed-off-by: Andrey Kalachev <kalac...@swemel.ru> --- drivers/dma-buf/udmabuf.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/dma-buf/udmabuf.c b/drivers/dma-buf/udmabuf.c index 2bcdb935a3ac..e57d57a10bb0 100644 --- a/drivers/dma-buf/udmabuf.c +++ b/drivers/dma-buf/udmabuf.c @@ -33,12 +33,13 @@ static vm_fault_t udmabuf_vm_fault(struct vm_fault *vmf) struct vm_area_struct *vma = vmf->vma; struct udmabuf *ubuf = vma->vm_private_data; pgoff_t pgoff = vmf->pgoff; + unsigned long pfn; if (pgoff >= ubuf->pagecount) return VM_FAULT_SIGBUS; - vmf->page = ubuf->pages[pgoff]; - get_page(vmf->page); - return 0; + + pfn = page_to_pfn(ubuf->pages[pgoff]); + return vmf_insert_pfn(vma, vmf->address, pfn); } static const struct vm_operations_struct udmabuf_vm_ops = { @@ -54,6 +55,7 @@ static int mmap_udmabuf(struct dma_buf *buf, struct vm_area_struct *vma) vma->vm_ops = &udmabuf_vm_ops; vma->vm_private_data = ubuf; + vma->vm_flags |= VM_PFNMAP | VM_DONTEXPAND | VM_DONTDUMP; return 0; } -- 2.30.2