705e87c0c3
Convert those common loops using page_table_lock on the outside and pte_offset_map within to use just pte_offset_map_lock within instead. These all hold mmap_sem (some exclusively, some not), so at no level can a page table be whipped away from beneath them. But whereas pte_alloc loops tested with the "atomic" pmd_present, these loops are testing with pmd_none, which on i386 PAE tests both lower and upper halves. That's now unsafe, so add a cast into pmd_none to test only the vital lower half: we lose a little sensitivity to a corrupt middle directory, but not enough to worry about. It appears that i386 and UML were the only architectures vulnerable in this way, and pgd and pud no problem. Signed-off-by: Hugh Dickins <hugh@veritas.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> |
||
---|---|---|
.. | ||
a.out.h | ||
apic.h | ||
archparam-i386.h | ||
archparam-ppc.h | ||
archparam-x86_64.h | ||
atomic.h | ||
auxvec.h | ||
bitops.h | ||
boot.h | ||
bug.h | ||
bugs.h | ||
byteorder.h | ||
cache.h | ||
cacheflush.h | ||
calling.h | ||
checksum.h | ||
cobalt.h | ||
common.lds.S | ||
cpufeature.h | ||
cputime.h | ||
current.h | ||
delay.h | ||
desc.h | ||
div64.h | ||
dma-mapping.h | ||
dma.h | ||
dwarf2.h | ||
elf-i386.h | ||
elf-ppc.h | ||
elf-x86_64.h | ||
emergency-restart.h | ||
errno.h | ||
fcntl.h | ||
fixmap.h | ||
floppy.h | ||
futex.h | ||
hardirq.h | ||
highmem.h | ||
hw_irq.h | ||
ide.h | ||
io.h | ||
ioctl.h | ||
ioctls.h | ||
ipc.h | ||
ipcbuf.h | ||
irq.h | ||
irq_vectors.h | ||
keyboard.h | ||
kmap_types.h | ||
ldt.h | ||
linkage.h | ||
local.h | ||
locks.h | ||
mca_dma.h | ||
mman.h | ||
mmu.h | ||
mmu_context.h | ||
module-generic.h | ||
module-i386.h | ||
module-x86_64.h | ||
msgbuf.h | ||
mtrr.h | ||
namei.h | ||
page.h | ||
page_offset.h | ||
param.h | ||
pci.h | ||
pda.h | ||
percpu.h | ||
pgalloc.h | ||
pgtable-2level.h | ||
pgtable-3level.h | ||
pgtable.h | ||
poll.h | ||
posix_types.h | ||
prctl.h | ||
processor-generic.h | ||
processor-i386.h | ||
processor-ppc.h | ||
processor-x86_64.h | ||
ptrace-generic.h | ||
ptrace-i386.h | ||
ptrace-x86_64.h | ||
resource.h | ||
rwlock.h | ||
rwsem.h | ||
scatterlist.h | ||
sections.h | ||
segment.h | ||
semaphore.h | ||
sembuf.h | ||
serial.h | ||
setup.h | ||
shmbuf.h | ||
shmparam.h | ||
sigcontext-generic.h | ||
sigcontext-i386.h | ||
sigcontext-ppc.h | ||
sigcontext-x86_64.h | ||
siginfo.h | ||
signal.h | ||
smp.h | ||
socket.h | ||
sockios.h | ||
spinlock.h | ||
spinlock_types.h | ||
stat.h | ||
statfs.h | ||
string.h | ||
suspend.h | ||
system-generic.h | ||
system-i386.h | ||
system-ppc.h | ||
system-x86_64.h | ||
termbits.h | ||
termios.h | ||
thread_info.h | ||
timex.h | ||
tlb.h | ||
tlbflush.h | ||
topology.h | ||
types.h | ||
uaccess.h | ||
ucontext.h | ||
unaligned.h | ||
unistd.h | ||
user.h | ||
vga.h | ||
vm-flags-i386.h | ||
vm-flags-x86_64.h | ||
vm86.h | ||
xor.h |