c41d68a513
compat_alloc_user_space() expects the caller to independently call access_ok() to verify the returned area. A missing call could introduce problems on some architectures. This patch incorporates the access_ok() check into compat_alloc_user_space() and also adds a sanity check on the length. The existing compat_alloc_user_space() implementations are renamed arch_compat_alloc_user_space() and are used as part of the implementation of the new global function. This patch assumes NULL will cause __get_user()/__put_user() to either fail or access userspace on all architectures. This should be followed by checking the return value of compat_access_user_space() for NULL in the callers, at which time the access_ok() in the callers can also be removed. Reported-by: Ben Hawkes <hawkes@sota.gen.nz> Signed-off-by: H. Peter Anvin <hpa@linux.intel.com> Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org> Acked-by: Chris Metcalf <cmetcalf@tilera.com> Acked-by: David S. Miller <davem@davemloft.net> Acked-by: Ingo Molnar <mingo@elte.hu> Acked-by: Thomas Gleixner <tglx@linutronix.de> Acked-by: Tony Luck <tony.luck@intel.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Fenghua Yu <fenghua.yu@intel.com> Cc: H. Peter Anvin <hpa@zytor.com> Cc: Heiko Carstens <heiko.carstens@de.ibm.com> Cc: Helge Deller <deller@gmx.de> Cc: James Bottomley <jejb@parisc-linux.org> Cc: Kyle McMartin <kyle@mcmartin.ca> Cc: Martin Schwidefsky <schwidefsky@de.ibm.com> Cc: Paul Mackerras <paulus@samba.org> Cc: Ralf Baechle <ralf@linux-mips.org> Cc: <stable@kernel.org> |
||
|---|---|---|
| .. | ||
| Kbuild | ||
| airq.h | ||
| appldata.h | ||
| asm-offsets.h | ||
| atomic.h | ||
| auxvec.h | ||
| bitops.h | ||
| bitsperlong.h | ||
| bug.h | ||
| bugs.h | ||
| byteorder.h | ||
| cache.h | ||
| cacheflush.h | ||
| ccwdev.h | ||
| ccwgroup.h | ||
| checksum.h | ||
| chpid.h | ||
| chsc.h | ||
| cio.h | ||
| cmb.h | ||
| compat.h | ||
| cpcmd.h | ||
| cpu.h | ||
| cputime.h | ||
| crw.h | ||
| current.h | ||
| dasd.h | ||
| debug.h | ||
| delay.h | ||
| device.h | ||
| diag.h | ||
| div64.h | ||
| dma.h | ||
| ebcdic.h | ||
| elf.h | ||
| emergency-restart.h | ||
| errno.h | ||
| etr.h | ||
| extmem.h | ||
| fb.h | ||
| fcntl.h | ||
| fcx.h | ||
| ftrace.h | ||
| futex.h | ||
| hardirq.h | ||
| hugetlb.h | ||
| idals.h | ||
| io.h | ||
| ioctl.h | ||
| ioctls.h | ||
| ipcbuf.h | ||
| ipl.h | ||
| irq.h | ||
| irq_regs.h | ||
| irqflags.h | ||
| isc.h | ||
| itcw.h | ||
| kdebug.h | ||
| kexec.h | ||
| kmap_types.h | ||
| kprobes.h | ||
| kvm.h | ||
| kvm_host.h | ||
| kvm_para.h | ||
| kvm_virtio.h | ||
| linkage.h | ||
| local.h | ||
| local64.h | ||
| lowcore.h | ||
| mathemu.h | ||
| mman.h | ||
| mmu.h | ||
| mmu_context.h | ||
| module.h | ||
| monwriter.h | ||
| msgbuf.h | ||
| mutex.h | ||
| nmi.h | ||
| page.h | ||
| param.h | ||
| pci.h | ||
| percpu.h | ||
| perf_event.h | ||
| pgalloc.h | ||
| pgtable.h | ||
| poll.h | ||
| posix_types.h | ||
| processor.h | ||
| ptrace.h | ||
| qdio.h | ||
| qeth.h | ||
| reset.h | ||
| resource.h | ||
| rwsem.h | ||
| s390_ext.h | ||
| scatterlist.h | ||
| schid.h | ||
| sclp.h | ||
| scsw.h | ||
| seccomp.h | ||
| sections.h | ||
| segment.h | ||
| sembuf.h | ||
| setup.h | ||
| sfp-machine.h | ||
| sfp-util.h | ||
| shmbuf.h | ||
| shmparam.h | ||
| sigcontext.h | ||
| siginfo.h | ||
| signal.h | ||
| sigp.h | ||
| smp.h | ||
| socket.h | ||
| sockios.h | ||
| sparsemem.h | ||
| spinlock.h | ||
| spinlock_types.h | ||
| stat.h | ||
| statfs.h | ||
| string.h | ||
| suspend.h | ||
| swab.h | ||
| syscall.h | ||
| sysinfo.h | ||
| system.h | ||
| tape390.h | ||
| termbits.h | ||
| termios.h | ||
| thread_info.h | ||
| timer.h | ||
| timex.h | ||
| tlb.h | ||
| tlbflush.h | ||
| topology.h | ||
| types.h | ||
| uaccess.h | ||
| ucontext.h | ||
| unaligned.h | ||
| unistd.h | ||
| user.h | ||
| vdso.h | ||
| vtoc.h | ||
| xor.h | ||
| zcrypt.h | ||