diff options
author | David Daney <[email protected]> | 2013-05-07 17:11:16 +0000 |
---|---|---|
committer | Ralf Baechle <[email protected]> | 2013-05-17 20:36:15 +0200 |
commit | 49c426ba445f83d304a5eab3d49efa123329cf2b (patch) | |
tree | 5c7190331c742fe928bc7ff473a72b27688ec1ad /lib/memory-notifier-error-inject.c | |
parent | e84ff42500a2b909d8aaca9a6df84c0616df121f (diff) |
MIPS: Make virt_to_phys() work for all unmapped addresses.
As reported:
This problem was discovered when doing BGP traffic with the TCP MD5 option
activated, where the following call chain caused a crash:
* tcp_v4_rcv
* tcp_v4_timewait_ack
* tcp_v4_send_ack -> follow stack variable rep.th
* tcp_v4_md5_hash_hdr
* tcp_md5_hash_header
* sg_init_one
* sg_set_buf
* virt_to_page
I noticed that tcp_v4_send_reset uses a similar stack variable and
also calls tcp_v4_md5_hash_hdr, so it has the same problem.
The networking core can indirectly call virt_to_phys() on stack
addresses, if this is done from PID 0, the stack will usually be in
CKSEG0, so virt_to_phys() needs to work there as well
Signed-off-by: David Daney <[email protected]>
Cc: [email protected]
Cc: Jiang Liu <[email protected]>
Cc: [email protected]
Cc: [email protected]
Patchwork: https://patchwork.linux-mips.org/patch/5220/
Signed-off-by: Ralf Baechle <[email protected]>
Diffstat (limited to 'lib/memory-notifier-error-inject.c')
0 files changed, 0 insertions, 0 deletions