diff options
author | David Daney <david.daney@cavium.com> | 2013-05-07 21:11:16 +0400 |
---|---|---|
committer | Ralf Baechle <ralf@linux-mips.org> | 2013-05-17 22:36:15 +0400 |
commit | 49c426ba445f83d304a5eab3d49efa123329cf2b (patch) | |
tree | 5c7190331c742fe928bc7ff473a72b27688ec1ad /arch/mips/pmcs-msp71xx | |
parent | e84ff42500a2b909d8aaca9a6df84c0616df121f (diff) | |
download | linux-49c426ba445f83d304a5eab3d49efa123329cf2b.tar.xz |
MIPS: Make virt_to_phys() work for all unmapped addresses.
As reported:
This problem was discovered when doing BGP traffic with the TCP MD5 option
activated, where the following call chain caused a crash:
* tcp_v4_rcv
* tcp_v4_timewait_ack
* tcp_v4_send_ack -> follow stack variable rep.th
* tcp_v4_md5_hash_hdr
* tcp_md5_hash_header
* sg_init_one
* sg_set_buf
* virt_to_page
I noticed that tcp_v4_send_reset uses a similar stack variable and
also calls tcp_v4_md5_hash_hdr, so it has the same problem.
The networking core can indirectly call virt_to_phys() on stack
addresses, if this is done from PID 0, the stack will usually be in
CKSEG0, so virt_to_phys() needs to work there as well
Signed-off-by: David Daney <david.daney@cavium.com>
Cc: linux-mips@linux-mips.org
Cc: Jiang Liu <liuj97@gmail.com>
Cc: eunb.song@samsung.com
Cc: linux-kernel@vger.kernel.org
Patchwork: https://patchwork.linux-mips.org/patch/5220/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
Diffstat (limited to 'arch/mips/pmcs-msp71xx')
0 files changed, 0 insertions, 0 deletions