提交 5bd0190b 编写于 作者: D David Gibson 提交者: Linus Torvalds

[PATCH] Fix crash when ptrace poking hugepage areas

set_page_dirty() will not cope with being handed a page * which is part of
a compound page, but not the master page in that compound page.  This case
can occur via access_process_vm() if you attemp to write to another
process's hugepage memory area using ptrace() (causing an oops or hang).

This patch fixes the bug by only calling set_page_dirty() from
access_process_vm() if the page is not a compound page.  We already use a
similar fix in bio_set_pages_dirty() for the case of direct io to
hugepages.
Signed-off-by: NDavid Gibson <david@gibson.dropbear.id.au>
Acked-by: NWilliam Irwin <wli@holomorphy.com>
Signed-off-by: NAndrew Morton <akpm@osdl.org>
Signed-off-by: NLinus Torvalds <torvalds@osdl.org>
上级 df69a60d
...@@ -241,6 +241,7 @@ int access_process_vm(struct task_struct *tsk, unsigned long addr, void *buf, in ...@@ -241,6 +241,7 @@ int access_process_vm(struct task_struct *tsk, unsigned long addr, void *buf, in
if (write) { if (write) {
copy_to_user_page(vma, page, addr, copy_to_user_page(vma, page, addr,
maddr + offset, buf, bytes); maddr + offset, buf, bytes);
if (!PageCompound(page))
set_page_dirty_lock(page); set_page_dirty_lock(page);
} else { } else {
copy_from_user_page(vma, page, addr, copy_from_user_page(vma, page, addr,
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册