summaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorDavid S. Miller <davem@davemloft.net>2014-05-07 14:07:32 -0700
committerDavid S. Miller <davem@davemloft.net>2014-05-08 14:59:07 -0700
commitb18eb2d779240631a098626cb6841ee2dd34fda0 (patch)
tree54ac1e0dc1c39161ff5b1d94619bd711ee89ae59 /security
parente5c460f46ae7ee94831cb55cb980f942aa9e5a85 (diff)
downloadlinux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.tar.gz
linux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.tar.bz2
linux-stable-b18eb2d779240631a098626cb6841ee2dd34fda0.zip
sparc64: Fix huge TSB mapping on pre-UltraSPARC-III cpus.
Access to the TSB hash tables during TLB misses requires that there be an atomic 128-bit quad load available so that we fetch a matching TAG and DATA field at the same time. On cpus prior to UltraSPARC-III only virtual address based quad loads are available. UltraSPARC-III and later provide physical address based variants which are easier to use. When we only have virtual address based quad loads available this means that we have to lock the TSB into the TLB at a fixed virtual address on each cpu when it runs that process. We can't just access the PAGE_OFFSET based aliased mapping of these TSBs because we cannot take a recursive TLB miss inside of the TLB miss handler without risking running out of hardware trap levels (some trap combinations can be deep, such as those generated by register window spill and fill traps). Without huge pages it's working perfectly fine, but when the huge TSB got added another chunk of fixed virtual address space was not allocated for this second TSB mapping. So we were mapping both the 8K and 4MB TSBs to the same exact virtual address, causing multiple TLB matches which gives undefined behavior. Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions