diff options
| author | Paul Mackerras <paulus@samba.org> | 2005-05-01 08:58:42 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-05-01 08:58:42 -0700 |
| commit | d5812a77e5803468a5033be91af978be0f7a17d9 (patch) | |
| tree | e01d079528be80ee78fad247b8af959b58e41d0e /arch/ppc | |
| parent | b20cc8aff258eea5a2339107605ebea949fa6ecf (diff) | |
| download | linux-d5812a77e5803468a5033be91af978be0f7a17d9.tar.gz linux-d5812a77e5803468a5033be91af978be0f7a17d9.tar.bz2 linux-d5812a77e5803468a5033be91af978be0f7a17d9.zip | |
[PATCH] ppc32: Fix address checking on lmw/stmw align exception
The handling of misaligned load/store multiple instructions did not check
to see if the address was ok to access before using __{get,put}_user().
Signed-off-by: Kumar Gala <kumar.gala@freescale.com>
Signed-off-by: Paul Mackerras <paulus@samba.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'arch/ppc')
| -rw-r--r-- | arch/ppc/kernel/align.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/arch/ppc/kernel/align.c b/arch/ppc/kernel/align.c index 40d356c66c41..ff81da9598d8 100644 --- a/arch/ppc/kernel/align.c +++ b/arch/ppc/kernel/align.c @@ -290,6 +290,10 @@ fix_alignment(struct pt_regs *regs) /* lwm, stmw */ nb = (32 - reg) * 4; } + + if (!access_ok((flags & ST? VERIFY_WRITE: VERIFY_READ), addr, nb+nb0)) + return -EFAULT; /* bad address */ + rptr = (unsigned char *) ®s->gpr[reg]; if (flags & LD) { for (i = 0; i < nb; ++i) |