c41d68a513
compat_alloc_user_space() expects the caller to independently call access_ok() to verify the returned area. A missing call could introduce problems on some architectures. This patch incorporates the access_ok() check into compat_alloc_user_space() and also adds a sanity check on the length. The existing compat_alloc_user_space() implementations are renamed arch_compat_alloc_user_space() and are used as part of the implementation of the new global function. This patch assumes NULL will cause __get_user()/__put_user() to either fail or access userspace on all architectures. This should be followed by checking the return value of compat_access_user_space() for NULL in the callers, at which time the access_ok() in the callers can also be removed. Reported-by: Ben Hawkes <hawkes@sota.gen.nz> Signed-off-by: H. Peter Anvin <hpa@linux.intel.com> Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org> Acked-by: Chris Metcalf <cmetcalf@tilera.com> Acked-by: David S. Miller <davem@davemloft.net> Acked-by: Ingo Molnar <mingo@elte.hu> Acked-by: Thomas Gleixner <tglx@linutronix.de> Acked-by: Tony Luck <tony.luck@intel.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Fenghua Yu <fenghua.yu@intel.com> Cc: H. Peter Anvin <hpa@zytor.com> Cc: Heiko Carstens <heiko.carstens@de.ibm.com> Cc: Helge Deller <deller@gmx.de> Cc: James Bottomley <jejb@parisc-linux.org> Cc: Kyle McMartin <kyle@mcmartin.ca> Cc: Martin Schwidefsky <schwidefsky@de.ibm.com> Cc: Paul Mackerras <paulus@samba.org> Cc: Ralf Baechle <ralf@linux-mips.org> Cc: <stable@kernel.org> |
||
---|---|---|
.. | ||
agp.h | ||
apb.h | ||
apc.h | ||
asi.h | ||
asm-offsets.h | ||
asm.h | ||
asmmacro.h | ||
atomic_32.h | ||
atomic_64.h | ||
atomic.h | ||
auxio_32.h | ||
auxio_64.h | ||
auxio.h | ||
auxvec.h | ||
backoff.h | ||
bbc.h | ||
bitext.h | ||
bitops_32.h | ||
bitops_64.h | ||
bitops.h | ||
bitsperlong.h | ||
btext.h | ||
btfixup.h | ||
bug.h | ||
bugs.h | ||
byteorder.h | ||
cache.h | ||
cacheflush_32.h | ||
cacheflush_64.h | ||
cacheflush.h | ||
chafsr.h | ||
checksum_32.h | ||
checksum_64.h | ||
checksum.h | ||
chmctrl.h | ||
clock.h | ||
cmt.h | ||
compat_signal.h | ||
compat.h | ||
contregs.h | ||
cpudata_32.h | ||
cpudata_64.h | ||
cpudata.h | ||
cputime.h | ||
current.h | ||
cypress.h | ||
dcr.h | ||
dcu.h | ||
delay_32.h | ||
delay_64.h | ||
delay.h | ||
device.h | ||
display7seg.h | ||
div64.h | ||
dma-mapping.h | ||
dma.h | ||
ebus_dma.h | ||
ecc.h | ||
eeprom.h | ||
elf_32.h | ||
elf_64.h | ||
elf.h | ||
emergency-restart.h | ||
envctrl.h | ||
errno.h | ||
estate.h | ||
fb.h | ||
fbio.h | ||
fcntl.h | ||
fhc.h | ||
fixmap.h | ||
floppy_32.h | ||
floppy_64.h | ||
floppy.h | ||
fpumacro.h | ||
ftrace.h | ||
futex_32.h | ||
futex_64.h | ||
futex.h | ||
gpio.h | ||
hardirq_32.h | ||
hardirq_64.h | ||
hardirq.h | ||
head_32.h | ||
head_64.h | ||
head.h | ||
highmem.h | ||
hugetlb.h | ||
hvtramp.h | ||
hw_irq.h | ||
hypervisor.h | ||
ide.h | ||
idprom.h | ||
intr_queue.h | ||
io_32.h | ||
io_64.h | ||
io-unit.h | ||
io.h | ||
ioctl.h | ||
ioctls.h | ||
iommu_32.h | ||
iommu_64.h | ||
iommu.h | ||
ipcbuf.h | ||
irq_32.h | ||
irq_64.h | ||
irq_regs.h | ||
irq.h | ||
irqflags_32.h | ||
irqflags_64.h | ||
irqflags.h | ||
jsflash.h | ||
Kbuild | ||
kdebug_32.h | ||
kdebug_64.h | ||
kdebug.h | ||
kgdb.h | ||
kmap_types.h | ||
kprobes.h | ||
ldc.h | ||
leon_amba.h | ||
leon.h | ||
linkage.h | ||
local64.h | ||
local.h | ||
lsu.h | ||
machines.h | ||
mbus.h | ||
mc146818rtc_32.h | ||
mc146818rtc_64.h | ||
mc146818rtc.h | ||
mdesc.h | ||
memblock.h | ||
memctrl.h | ||
memreg.h | ||
mman.h | ||
mmu_32.h | ||
mmu_64.h | ||
mmu_context_32.h | ||
mmu_context_64.h | ||
mmu_context.h | ||
mmu.h | ||
mmzone.h | ||
module.h | ||
mpmbox.h | ||
msgbuf.h | ||
msi.h | ||
mutex.h | ||
mxcc.h | ||
nmi.h | ||
ns87303.h | ||
obio.h | ||
openprom.h | ||
openpromio.h | ||
oplib_32.h | ||
oplib_64.h | ||
oplib.h | ||
page_32.h | ||
page_64.h | ||
page.h | ||
param.h | ||
parport.h | ||
pbm.h | ||
pci_32.h | ||
pci_64.h | ||
pci.h | ||
pcic.h | ||
pcr.h | ||
percpu_32.h | ||
percpu_64.h | ||
percpu.h | ||
perf_event.h | ||
perfctr.h | ||
pgalloc_32.h | ||
pgalloc_64.h | ||
pgalloc.h | ||
pgtable_32.h | ||
pgtable_64.h | ||
pgtable.h | ||
pgtsrmmu.h | ||
pgtsun4.h | ||
pgtsun4c.h | ||
pil.h | ||
poll.h | ||
posix_types.h | ||
processor_32.h | ||
processor_64.h | ||
processor.h | ||
prom.h | ||
psr.h | ||
psrcompat.h | ||
pstate.h | ||
ptrace.h | ||
resource.h | ||
ross.h | ||
rwsem.h | ||
sbi.h | ||
scatterlist.h | ||
scratchpad.h | ||
seccomp.h | ||
sections.h | ||
sembuf.h | ||
serial.h | ||
setup.h | ||
sfafsr.h | ||
sfp-machine_32.h | ||
sfp-machine_64.h | ||
sfp-machine.h | ||
shmbuf.h | ||
shmparam_32.h | ||
shmparam_64.h | ||
shmparam.h | ||
sigcontext.h | ||
siginfo.h | ||
signal.h | ||
smp_32.h | ||
smp_64.h | ||
smp.h | ||
smpprim.h | ||
socket.h | ||
sockios.h | ||
sparsemem.h | ||
spinlock_32.h | ||
spinlock_64.h | ||
spinlock_types.h | ||
spinlock.h | ||
spitfire.h | ||
stacktrace.h | ||
starfire.h | ||
stat.h | ||
statfs.h | ||
string_32.h | ||
string_64.h | ||
string.h | ||
sunbpp.h | ||
swab.h | ||
swift.h | ||
syscall.h | ||
syscalls.h | ||
sysen.h | ||
system_32.h | ||
system_64.h | ||
system.h | ||
termbits.h | ||
termios.h | ||
thread_info_32.h | ||
thread_info_64.h | ||
thread_info.h | ||
timer_32.h | ||
timer_64.h | ||
timer.h | ||
timex_32.h | ||
timex_64.h | ||
timex.h | ||
tlb_32.h | ||
tlb_64.h | ||
tlb.h | ||
tlbflush_32.h | ||
tlbflush_64.h | ||
tlbflush.h | ||
topology_32.h | ||
topology_64.h | ||
topology.h | ||
trap_block.h | ||
traps.h | ||
tsb.h | ||
tsunami.h | ||
ttable.h | ||
turbosparc.h | ||
types.h | ||
uaccess_32.h | ||
uaccess_64.h | ||
uaccess.h | ||
uctx.h | ||
unaligned.h | ||
unistd.h | ||
upa.h | ||
user.h | ||
utrap.h | ||
vac-ops.h | ||
vaddrs.h | ||
vga.h | ||
viking.h | ||
vio.h | ||
visasm.h | ||
watchdog.h | ||
winmacro.h | ||
xor_32.h | ||
xor_64.h | ||
xor.h |