Ard Biesheuvel
647f605276
mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap mappings ...
commit 029c54b09599573015a5c18dbe59cbdf42742237 upstream.
Existing code that uses vmalloc_to_page() may assume that any address
for which is_vmalloc_addr() returns true may be passed into
vmalloc_to_page() to retrieve the associated struct page.
This is not un unreasonable assumption to make, but on architectures
that have CONFIG_HAVE_ARCH_HUGE_VMAP=y, it no longer holds, and we need
to ensure that vmalloc_to_page() does not go off into the weeds trying
to dereference huge PUDs or PMDs as table entries.
Given that vmalloc() and vmap() themselves never create huge mappings or
deal with compound pages at all, there is no correct answer in this
case, so return NULL instead, and issue a warning.
When reading /proc/kcore on arm64, you will hit an oops as soon as you
hit the huge mappings used for the various segments that make up the
mapping of vmlinux. With this patch applied, you will no longer hit the
oops, but the kcore contents willl be incorrect (these regions will be
zeroed out)
We are fixing this for kcore specifically, so it avoids vread() for
those regions. At least one other problematic user exists, i.e.,
/dev/kmem, but that is currently broken on arm64 for other reasons.
Link: http://lkml.kernel.org/r/20170609082226.26152-1-ard.biesheuvel@linaro.org
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Acked-by: Mark Rutland <mark.rutland@arm.com>
Reviewed-by: Laura Abbott <labbott@redhat.com>
Cc: Michal Hocko <mhocko@suse.com>
Cc: zhong jiang <zhongjiang@huawei.com>
Cc: Dave Hansen <dave.hansen@intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
[ardb: non-trivial backport to v4.9]
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-07-05 14:40:28 +02:00
kasan: respect /proc/sys/kernel/traceoff_on_warning
2017-06-17 06:41:51 +02:00
block: fix double-free in the failure path of cgwb_bdi_init()
2017-02-26 11:10:52 +01:00
mm: balloon: use general non-lru movable page feature
2016-07-26 16:19:19 -07:00
mm: kmemleak: avoid using __va() on addresses that don't have a lowmem mapping
2016-10-11 15:06:33 -07:00
cleancache: constify cleancache_ops structure
2016-01-27 09:09:57 -05:00
mm/cma.c: check the max limit for cma allocation
2016-11-11 08:12:37 -08:00
mm: cma: mark cma_bitmap_maxno() inline in header
2015-08-14 15:56:32 -07:00
mm/cma_debug: correct size input to bitmap function
2015-07-17 16:39:54 -07:00
mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
2017-01-12 11:39:32 +01:00
mm: clarify why we avoid page_mapcount() for slab pages in dump_page()
2016-10-07 18:46:29 -07:00
mm/page_ref: add tracepoint to track down page reference manipulation
2016-03-17 15:09:34 -07:00
mm: convert printk(KERN_<LEVEL> to pr_<level>
2016-03-17 15:09:34 -07:00
mm/early_ioremap: use offset_in_page macro
2015-11-05 19:34:48 -08:00
mm/fadvise.c: do not discard partial pages with POSIX_FADV_DONTNEED
2016-06-09 14:23:11 -07:00
mm: fault-inject take over bootstrap kmem_cache check
2016-03-15 16:55:16 -07:00
mm: do not access page->mapping directly on page_endio
2017-03-12 06:41:43 +01:00
mm: replace get_vaddr_frames() write/force parameters with gup_flags
2016-10-19 08:11:24 -07:00
mm, frontswap: convert frontswap_enabled to static key
2016-07-26 16:19:19 -07:00
mm: larger stack guard gap, between vmas
2017-06-24 07:11:18 +02:00
mm/highmem: make nr_free_highpages() handles all highmem zones by itself
2016-05-19 19:12:14 -07:00
mm: numa: avoid waiting on freed migrated pages
2017-07-05 14:40:19 +02:00
mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd()
2017-04-08 09:30:35 +02:00
mm, hugetlb_cgroup: round limit_in_bytes down to hugepage size
2016-05-20 17:58:30 -07:00
hwpoison: use page_cgroup_ino for filtering by memcg
2015-09-10 13:29:01 -07:00
mm: Add a user_ns owner to mm_struct and fix ptrace permission checks
2017-01-06 10:40:13 +01:00
mm, compaction: make full priority ignore pageblock suitability
2016-10-07 18:46:29 -07:00
Allow KASAN and HOTPLUG_MEMORY to co-exist when doing build testing
2016-10-27 16:23:01 -07:00
PM / Hibernate: allow hibernation with PAGE_POISONING_ZERO
2016-09-13 02:35:27 +02:00
mm: khugepaged: fix radix tree node leak in shmem collapse error path
2017-01-12 11:39:32 +01:00
mm: convert printk(KERN_<LEVEL> to pr_<level>
2016-03-17 15:09:34 -07:00
mm: convert printk(KERN_<LEVEL> to pr_<level>
2016-03-17 15:09:34 -07:00
mm: kmemleak: scan .data.ro_after_init
2016-11-11 08:12:37 -08:00
ksm: prevent crash after write_protect_page fails
2017-06-07 12:07:49 +02:00
mm/list_lru.c: avoid error-path NULL pointer deref
2016-10-27 18:43:42 -07:00
x86: remove more uaccess_32.h complexity
2016-05-22 17:21:27 -07:00
mm: make mmap_sem for write waits killable for mm syscalls
2016-05-23 17:04:14 -07:00
Disable the __builtin_return_address() warning globally after all
2016-10-12 10:23:41 -07:00
mm: consider memblock reservations for deferred memory initialization sizing
2017-06-07 12:07:49 +02:00
mm: memcontrol: use special workqueue for creating per-memcg caches
2017-04-21 09:31:23 +02:00
mm/memory-failure.c: use compound_head() flags for huge pages
2017-06-24 07:11:16 +02:00
mm: larger stack guard gap, between vmas
2017-06-24 07:11:18 +02:00
base/memory, hotplug: fix a kernel oops in show_valid_zones()
2017-02-09 08:08:28 +01:00
mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
2017-04-12 12:41:15 +02:00
Revert "mm, mempool: only set __GFP_NOMEMALLOC if there are free elements"
2016-07-28 16:07:41 -07:00
memtest: remove unused header files
2015-09-08 15:35:28 -07:00
mm: prevent NR_ISOLATE_* stats from going negative
2017-04-27 09:10:37 +02:00
mm, swap: use offset of swap entry as key of swap cache
2016-10-07 18:46:28 -07:00
mlock: fix mlock count can not decrease in race condition
2017-06-07 12:07:49 +02:00
mm: convert printk(KERN_<LEVEL> to pr_<level>
2016-03-17 15:09:34 -07:00
mm: fix new crash in unmapped_area_topdown()
2017-06-24 07:11:18 +02:00
mm/mmu_context, sched/core: Fix mmu_context.h assumption
2016-04-28 11:44:19 +02:00
fix Christoph's email addresses
2016-03-17 15:09:34 -07:00
mm, page_alloc: inline the fast path of the zonelist iterator
2016-05-19 19:12:14 -07:00
mm/numa: Remove duplicated include from mprotect.c
2016-10-19 17:28:48 +02:00
mremap: move_ptes: check pte dirty after its removal
2016-11-29 08:20:24 -08:00
mm/msync: use offset_in_page macro
2015-11-05 19:34:48 -08:00
mm: kmemleak: avoid using __va() on addresses that don't have a lowmem mapping
2016-10-11 15:06:33 -07:00
ptrace: Don't allow accessing an undumpable mm
2017-01-06 10:40:13 +01:00
oom: print nodemask in the oom report
2016-10-07 18:46:29 -07:00
mm: don't use radix tree writeback tags for pages in swap cache
2016-10-07 18:46:28 -07:00
mm: consider memblock reservations for deferred memory initialization sizing
2017-06-07 12:07:49 +02:00
mm: page_counter: let page_counter_try_charge() return bool
2015-11-05 19:34:48 -08:00
mm/page_ext: support extra space allocation by page_ext user
2016-10-07 18:46:27 -07:00
mm, vmscan: move lru_lock to the node
2016-07-28 16:07:41 -07:00
mm/page_io.c: replace some BUG_ON()s with VM_BUG_ON_PAGE()
2016-10-07 18:46:29 -07:00
mm/page_isolation: fix typo: "paes" -> "pages"
2016-10-07 18:46:29 -07:00
mm/page_owner: don't define fields on struct page_ext by hard-coding
2016-10-07 18:46:27 -07:00
mm: check the return value of lookup_page_ext for all call sites
2016-06-03 15:06:22 -07:00
thp: rename split_huge_page_pmd() to split_huge_pmd()
2016-01-15 17:56:32 -08:00
mm: percpu: use pr_fmt to prefix output
2016-03-17 15:09:34 -07:00
percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
2017-03-26 13:05:58 +02:00
mm/thp/migration: switch from flush_tlb_range to flush_pmd_tlb_range
2016-03-17 15:09:34 -07:00
mm: remove write/force parameters from __get_user_pages_unlocked()
2016-10-18 14:13:37 -07:00
fix Christoph's email addresses
2016-03-17 15:09:34 -07:00
mm: silently skip readahead for DAX inodes
2016-08-26 17:39:35 -07:00
mm: rmap: fix huge file mmap accounting in the memcg stats
2017-04-08 09:30:35 +02:00
shmem: fix sleeping from atomic context
2017-06-17 06:41:51 +02:00
slub: move synchronize_sched out of slab_mutex on shrink
2017-03-22 12:43:38 +01:00
slub: move synchronize_sched out of slab_mutex on shrink
2017-03-22 12:43:38 +01:00
slub: move synchronize_sched out of slab_mutex on shrink
2017-03-22 12:43:38 +01:00
slub: move synchronize_sched out of slab_mutex on shrink
2017-03-22 12:43:38 +01:00
mm/slub.c: trace free objects at KERN_INFO
2017-06-07 12:07:49 +02:00
treewide: replace obsolete _refok by __ref
2016-08-02 17:31:41 -04:00
treewide: replace obsolete _refok by __ref
2016-08-02 17:31:41 -04:00
thp: reduce usage of huge zero page's atomic counter
2016-10-07 18:46:28 -07:00
mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff()
2017-07-05 14:40:17 +02:00
mm, swap: use offset of swap entry as key of swap cache
2016-10-07 18:46:28 -07:00
mm: support anonymous stable page
2017-01-19 20:17:59 +01:00
fs: add i_blocksize()
2017-06-14 15:06:00 +02:00
mm: usercopy: Check for module addresses
2016-09-20 16:07:39 -07:00
mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros
2016-04-04 10:41:08 -07:00
Merge branch 'mm-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2016-10-22 09:39:10 -07:00
mm: unrig VMA cache hit ratio
2016-10-07 18:46:27 -07:00
mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap mappings
2017-07-05 14:40:28 +02:00
mm: vmpressure: fix sending wrong events on underflow
2017-03-12 06:41:43 +01:00
mm, vmscan: consider eligible zones in get_scan_count
2017-03-12 06:41:44 +01:00
seq/proc: modify seq_put_decimal_[u]ll to take a const char *, not char
2016-10-07 18:46:30 -07:00
mm: workingset: fix premature shadow node shrinking with cgroups
2017-04-08 09:30:36 +02:00
mm/z3fold.c: avoid modifying HEADLESS page and minor cleanup
2016-06-03 16:02:55 -07:00
mm/zbud.c: use list_last_entry() instead of list_tail_entry()
2016-01-15 11:40:52 -08:00
mm: zsmalloc: constify struct zs_pool name
2015-11-06 17:50:42 -08:00
zsmalloc: expand class bit
2017-04-21 09:31:19 +02:00
zswap: disable changing params if init fails
2017-02-09 08:08:27 +01:00
647f605276