summaryrefslogtreecommitdiff
path: root/drivers/tc
diff options
context:
space:
mode:
authorGregory Price <gourry.memverge@gmail.com>2023-10-03 17:48:56 +0300
committerAndrew Morton <akpm@linux-foundation.org>2023-10-07 00:11:38 +0300
commit229e2253766c7cdfe024f1fe280020cc4711087c (patch)
tree504d51f51067d3c9832d4bf887f6b674c78485b4 /drivers/tc
parent1de195dd0e05d9cba43dec16f83d4ee32af94dd2 (diff)
downloadlinux-229e2253766c7cdfe024f1fe280020cc4711087c.tar.xz
mm/migrate: fix do_pages_move for compat pointers
do_pages_move does not handle compat pointers for the page list. correctly. Add in_compat_syscall check and appropriate get_user fetch when iterating the page list. It makes the syscall in compat mode (32-bit userspace, 64-bit kernel) work the same way as the native 32-bit syscall again, restoring the behavior before my broken commit 5b1b561ba73c ("mm: simplify compat_sys_move_pages"). More specifically, my patch moved the parsing of the 'pages' array from the main entry point into do_pages_stat(), which left the syscall working correctly for the 'stat' operation (nodes = NULL), while the 'move' operation (nodes != NULL) is now missing the conversion and interprets 'pages' as an array of 64-bit pointers instead of the intended 32-bit userspace pointers. It is possible that nobody noticed this bug because the few applications that actually call move_pages are unlikely to run in compat mode because of their large memory requirements, but this clearly fixes a user-visible regression and should have been caught by ltp. Link: https://lkml.kernel.org/r/20231003144857.752952-1-gregory.price@memverge.com Fixes: 5b1b561ba73c ("mm: simplify compat_sys_move_pages") Signed-off-by: Gregory Price <gregory.price@memverge.com> Reported-by: Arnd Bergmann <arnd@arndb.de> Co-developed-by: Arnd Bergmann <arnd@arndb.de> Cc: Jonathan Cameron <Jonathan.Cameron@huawei.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Diffstat (limited to 'drivers/tc')
0 files changed, 0 insertions, 0 deletions