diff options
author | David S. Miller <davem@davemloft.net> | 2014-05-07 14:07:32 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2014-05-08 14:59:07 -0700 |
commit | b18eb2d779240631a098626cb6841ee2dd34fda0 (patch) | |
tree | 54ac1e0dc1c39161ff5b1d94619bd711ee89ae59 /security | |
parent | e5c460f46ae7ee94831cb55cb980f942aa9e5a85 (diff) | |
download | linux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.tar.gz linux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.tar.bz2 linux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.zip |
sparc64: Fix huge TSB mapping on pre-UltraSPARC-III cpus.
Access to the TSB hash tables during TLB misses requires that there be
an atomic 128-bit quad load available so that we fetch a matching TAG
and DATA field at the same time.
On cpus prior to UltraSPARC-III only virtual address based quad loads
are available. UltraSPARC-III and later provide physical address
based variants which are easier to use.
When we only have virtual address based quad loads available this
means that we have to lock the TSB into the TLB at a fixed virtual
address on each cpu when it runs that process. We can't just access
the PAGE_OFFSET based aliased mapping of these TSBs because we cannot
take a recursive TLB miss inside of the TLB miss handler without
risking running out of hardware trap levels (some trap combinations
can be deep, such as those generated by register window spill and fill
traps).
Without huge pages it's working perfectly fine, but when the huge TSB
got added another chunk of fixed virtual address space was not
allocated for this second TSB mapping.
So we were mapping both the 8K and 4MB TSBs to the same exact virtual
address, causing multiple TLB matches which gives undefined behavior.
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions