The patch titled
     Subject: mm/memory.c: actually remap enough memory
has been added to the -mm tree.  Its filename is
     mm-actually-remap-enough-memory.patch

This patch should soon appear at
    
http://ozlabs.org/~akpm/mmots/broken-out/mm-actually-remap-enough-memory.patch
and later at
    
http://ozlabs.org/~akpm/mmotm/broken-out/mm-actually-remap-enough-memory.patch

Before you just go and hit "reply", please:
   a) Consider who else should be cc'ed
   b) Prefer to cc a suitable mailing list as well
   c) Ideally: find the original patch on the mailing list and do a
      reply-to-all to that, adding suitable additional cc's

*** Remember to use Documentation/SubmitChecklist when testing your code ***

The -mm tree is included into linux-next and is updated
there every 3-4 working days

------------------------------------------------------
From: Grazvydas Ignotas <[email protected]>
Subject: mm/memory.c: actually remap enough memory

For whatever reason, generic_access_phys() only remaps one page, but
actually allows to access arbitrary size.  It's quite easy to trigger
large reads, like printing out large structure with gdb, which leads to a
crash.  Fix it by remapping correct size.

Fixes: 28b2ee20c7cb ("access_process_vm device memory infrastructure")
Signed-off-by: Grazvydas Ignotas <[email protected]>
Cc: Rik van Riel <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
---

 mm/memory.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff -puN mm/memory.c~mm-actually-remap-enough-memory mm/memory.c
--- a/mm/memory.c~mm-actually-remap-enough-memory
+++ a/mm/memory.c
@@ -3460,7 +3460,7 @@ int generic_access_phys(struct vm_area_s
        if (follow_phys(vma, addr, write, &prot, &phys_addr))
                return -EINVAL;
 
-       maddr = ioremap_prot(phys_addr, PAGE_SIZE, prot);
+       maddr = ioremap_prot(phys_addr, PAGE_ALIGN(len + offset), prot);
        if (write)
                memcpy_toio(maddr + offset, buf, len);
        else
_

Patches currently in -mm which might be from [email protected] are

mm-actually-remap-enough-memory.patch

--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to