]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
s390/mm: fix BUG_ON in crst_table_upgrade
authorMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 31 Aug 2017 11:18:22 +0000 (13:18 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 9 Sep 2017 15:39:33 +0000 (17:39 +0200)
commite3b9fb20262fcd0a39a48cf5f0ff1ad7e00f37dc
tree408d9ff6c1b9ada995964359cdb77ce8603bfd2e
parent2ce0e0495177e16c36527ab723147785a9320d3d
s390/mm: fix BUG_ON in crst_table_upgrade

commit 8ab867cb0806a8e195de161fd8883a0578d1d050 upstream.

A 31-bit compat process can force a BUG_ON in crst_table_upgrade
with specific, invalid mmap calls, e.g.

   mmap((void*) 0x7fff8000, 0x10000, 3, 32, -1, 0)

The arch_get_unmapped_area[_topdown] functions miss an if condition
in the decision to do a page table upgrade.

[ms: Backport to 4.12, minor context change]

Fixes: 9b11c7912d00 ("s390/mm: simplify arch_get_unmapped_area[_topdown]")
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
arch/s390/mm/mmap.c