compat_alloc_user_space() expects the caller to independently call access_ok() to verify the returned area. A missing call could introduce problems on some architectures. This patch incorporates the access_ok() check into compat_alloc_user_space() and also adds a sanity check on the length. The existing compat_alloc_user_space() implementations are renamed arch_compat_alloc_user_space() and are used as part of the implementation of the new global function. This patch assumes NULL will cause __get_user()/__put_user() to either fail or access userspace on all architectures. This should be followed by checking the return value of compat_access_user_space() for NULL in the callers, at which time the access_ok() in the callers can also be removed. Reported-by: Ben Hawkes <hawkes@sota.gen.nz> Signed-off-by: H. Peter Anvin <hpa@linux.intel.com> Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org> Acked-by: Chris Metcalf <cmetcalf@tilera.com> Acked-by: David S. Miller <davem@davemloft.net> Acked-by: Ingo Molnar <mingo@elte.hu> Acked-by: Thomas Gleixner <tglx@linutronix.de> Acked-by: Tony Luck <tony.luck@intel.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Fenghua Yu <fenghua.yu@intel.com> Cc: H. Peter Anvin <hpa@zytor.com> Cc: Heiko Carstens <heiko.carstens@de.ibm.com> Cc: Helge Deller <deller@gmx.de> Cc: James Bottomley <jejb@parisc-linux.org> Cc: Kyle McMartin <kyle@mcmartin.ca> Cc: Martin Schwidefsky <schwidefsky@de.ibm.com> Cc: Paul Mackerras <paulus@samba.org> Cc: Ralf Baechle <ralf@linux-mips.org> Cc: <stable@kernel.org> |
||
---|---|---|
.. | ||
native | ||
sn | ||
uv | ||
xen | ||
Kbuild | ||
acpi-ext.h | ||
acpi.h | ||
agp.h | ||
asm-offsets.h | ||
asmmacro.h | ||
atomic.h | ||
auxvec.h | ||
bitops.h | ||
bitsperlong.h | ||
break.h | ||
bug.h | ||
bugs.h | ||
byteorder.h | ||
cache.h | ||
cacheflush.h | ||
checksum.h | ||
compat.h | ||
cpu.h | ||
cputime.h | ||
current.h | ||
cyclone.h | ||
delay.h | ||
device.h | ||
div64.h | ||
dma-mapping.h | ||
dma.h | ||
dmi.h | ||
elf.h | ||
emergency-restart.h | ||
errno.h | ||
esi.h | ||
fb.h | ||
fcntl.h | ||
fpswa.h | ||
fpu.h | ||
ftrace.h | ||
futex.h | ||
gcc_intrin.h | ||
hardirq.h | ||
hpsim.h | ||
hugetlb.h | ||
hw_irq.h | ||
ia64regs.h | ||
idle.h | ||
intel_intrin.h | ||
intrinsics.h | ||
io.h | ||
ioctl.h | ||
ioctls.h | ||
iommu.h | ||
iosapic.h | ||
ipcbuf.h | ||
irq.h | ||
irq_regs.h | ||
kdebug.h | ||
kexec.h | ||
kmap_types.h | ||
kprobes.h | ||
kregs.h | ||
kvm.h | ||
kvm_host.h | ||
kvm_para.h | ||
libata-portmap.h | ||
linkage.h | ||
local.h | ||
local64.h | ||
machvec.h | ||
machvec_dig.h | ||
machvec_dig_vtd.h | ||
machvec_hpsim.h | ||
machvec_hpzx1.h | ||
machvec_hpzx1_swiotlb.h | ||
machvec_init.h | ||
machvec_sn2.h | ||
machvec_uv.h | ||
machvec_xen.h | ||
mc146818rtc.h | ||
mca.h | ||
mca_asm.h | ||
meminit.h | ||
mman.h | ||
mmu.h | ||
mmu_context.h | ||
mmzone.h | ||
module.h | ||
msgbuf.h | ||
msidef.h | ||
mutex.h | ||
nodedata.h | ||
numa.h | ||
page.h | ||
pal.h | ||
param.h | ||
paravirt.h | ||
paravirt_patch.h | ||
paravirt_privop.h | ||
parport.h | ||
patch.h | ||
pci.h | ||
percpu.h | ||
perfmon.h | ||
perfmon_default_smpl.h | ||
pgalloc.h | ||
pgtable.h | ||
poll.h | ||
posix_types.h | ||
processor.h | ||
ptrace.h | ||
ptrace_offsets.h | ||
pvclock-abi.h | ||
resource.h | ||
rse.h | ||
rwsem.h | ||
sal.h | ||
scatterlist.h | ||
sections.h | ||
segment.h | ||
sembuf.h | ||
serial.h | ||
setup.h | ||
shmbuf.h | ||
shmparam.h | ||
sigcontext.h | ||
siginfo.h | ||
signal.h | ||
smp.h | ||
socket.h | ||
sockios.h | ||
sparsemem.h | ||
spinlock.h | ||
spinlock_types.h | ||
stat.h | ||
statfs.h | ||
string.h | ||
swab.h | ||
swiotlb.h | ||
sync_bitops.h | ||
syscall.h | ||
system.h | ||
termbits.h | ||
termios.h | ||
thread_info.h | ||
timex.h | ||
tlb.h | ||
tlbflush.h | ||
topology.h | ||
types.h | ||
uaccess.h | ||
ucontext.h | ||
unaligned.h | ||
uncached.h | ||
unistd.h | ||
unwind.h | ||
user.h | ||
ustack.h | ||
vga.h | ||
xor.h |