]> git.baikalelectronics.ru Git - kernel.git/commit
cxl: Fix off by one error allowing subsequent mmap page to be accessed
authorIan Munsie <imunsie@au1.ibm.com>
Tue, 7 Jul 2015 05:45:45 +0000 (15:45 +1000)
committerMichael Ellerman <mpe@ellerman.id.au>
Wed, 8 Jul 2015 05:17:47 +0000 (15:17 +1000)
commit69f65f68cedc05874d5915ecc3c985156f249875
treeacd7285af4b5dfa807aac35aee9ed1f648c7475b
parent7c6fefa214f7fb607c6a23fff542ccc3cb1a90ff
cxl: Fix off by one error allowing subsequent mmap page to be accessed

It was discovered that if a process mmaped their problem state area they
were able to access one page more than expected, potentially allowing
them to access the problem state area of an unrelated process.

This was due to a simple off by one error in the mmap fault handler
introduced in 36a9f3da77ef596dc824caa4a05bf3ef918be119 ("cxl: Fix issues
when unmapping contexts"), which is fixed in this patch.

Cc: stable@vger.kernel.org
Fixes: 36a9f3da77ef ("cxl: Fix issues when unmapping contexts")
Signed-off-by: Ian Munsie <imunsie@au1.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
drivers/misc/cxl/context.c