diff options
| author | dg <dg@FreeBSD.org> | 1995-05-18 02:59:26 +0000 |
|---|---|---|
| committer | dg <dg@FreeBSD.org> | 1995-05-18 02:59:26 +0000 |
| commit | 56d21b42187f0f163a5c67c2126117d7ff8bc6fc (patch) | |
| tree | 7392d140844fbfda67ab8ff22f1dafd98f01ae78 /sys/vm/device_pager.c | |
| parent | 2831e6ec6177d558463cf22f90a0a04d21b4934b (diff) | |
| download | FreeBSD-src-56d21b42187f0f163a5c67c2126117d7ff8bc6fc.zip FreeBSD-src-56d21b42187f0f163a5c67c2126117d7ff8bc6fc.tar.gz | |
Accessing pages beyond the end of a mapped file results in internal
inconsistencies in the VM system that eventually lead to a panic. These
changes fix the behavior to conform to the behavior in SunOS, which is
to deny faults to pages beyond the EOF (returning SIGBUS). Internally,
this is implemented by requiring faults to be within the object size
boundaries. These changes exposed another bug, namely that passing in
an offset to mmap when trying to map an unnamed anonymous region also
results in internal inconsistencies. In this case, the offset is forced
to zero.
Reviewed by: John Dyson and others
Diffstat (limited to 'sys/vm/device_pager.c')
| -rw-r--r-- | sys/vm/device_pager.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/sys/vm/device_pager.c b/sys/vm/device_pager.c index 7cbe34b..5dad126 100644 --- a/sys/vm/device_pager.c +++ b/sys/vm/device_pager.c @@ -36,7 +36,7 @@ * SUCH DAMAGE. * * @(#)device_pager.c 8.1 (Berkeley) 6/11/93 - * $Id: device_pager.c,v 1.8 1995/04/16 12:56:11 davidg Exp $ + * $Id: device_pager.c,v 1.9 1995/05/10 18:56:01 davidg Exp $ */ /* @@ -175,7 +175,7 @@ top: /* * Allocate object and associate it with the pager. */ - object = devp->devp_object = vm_object_allocate(0); + object = devp->devp_object = vm_object_allocate(foff + size); object->flags &= ~OBJ_INTERNAL; vm_object_enter(object, pager); object->pager = pager; @@ -203,6 +203,8 @@ top: * Gain a reference to the object. */ object = vm_object_lookup(pager); + if (foff + size > object->size) + object->size = foff + size; #ifdef DIAGNOSTIC devp = (dev_pager_t) pager->pg_data; if (object != devp->devp_object) @@ -293,8 +295,6 @@ dev_pager_getpage(pager, m, sync) s = splhigh(); vm_page_insert(page, object, offset); splx(s); - if (offset + PAGE_SIZE > object->size) - object->size = offset + PAGE_SIZE; /* XXX anal */ vm_object_unlock(object); return (VM_PAGER_OK); |
