summaryrefslogtreecommitdiffstats
path: root/drivers/tc
diff options
context:
space:
mode:
authorHelge Deller <deller@gmx.de>2008-11-26 12:46:22 -0800
committerKyle McMartin <kyle@hera.kernel.org>2008-11-26 22:22:39 +0000
commit7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951 (patch)
tree565fb518a0eb19f0514e77ff0124be3642f281f2 /drivers/tc
parent9860d1b08b082ffb54c4b7827c48c2728e12ba21 (diff)
downloadop-kernel-dev-7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951.zip
op-kernel-dev-7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951.tar.gz
parisc: fix kernel crash when unwinding a userspace process
Any user on existing parisc 32- and 64bit-kernels can easily crash the kernel and as such enforce a DSO. A simple testcase is available here: http://gsyprf10.external.hp.com/~deller/crash.tgz The problem is introduced by the fact, that the handle_interruption() crash handler calls the show_regs() function, which in turn tries to unwind the stack by calling parisc_show_stack(). Since the stack contains userspace addresses, a try to unwind the stack is dangerous and useless and leads to the crash. The fix is trivial: For userspace processes a) avoid to unwind the stack, and b) avoid to resolve userspace addresses to kernel symbol names. While touching this code, I converted print_symbol() to %pS printk formats and made parisc_show_stack() static. An initial patch for this was written by Kyle McMartin back in August: http://marc.info/?l=linux-parisc&m=121805168830283&w=2 Compile and run-tested with a 64bit parisc kernel. Signed-off-by: Helge Deller <deller@gmx.de> Cc: Grant Grundler <grundler@parisc-linux.org> Cc: Matthew Wilcox <matthew@wil.cx> Cc: <stable@kernel.org> [2.6.25.x, 2.6.26.x, 2.6.27.x, earlier...] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Kyle McMartin <kyle@mcmartin.ca>
Diffstat (limited to 'drivers/tc')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud