diff options
author | Helge Deller <deller@gmx.de> | 2008-11-26 12:46:22 -0800 |
---|---|---|
committer | Kyle McMartin <kyle@hera.kernel.org> | 2008-11-26 22:22:39 +0000 |
commit | 7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951 (patch) | |
tree | 565fb518a0eb19f0514e77ff0124be3642f281f2 /drivers/tc | |
parent | 9860d1b08b082ffb54c4b7827c48c2728e12ba21 (diff) | |
download | op-kernel-dev-7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951.zip op-kernel-dev-7a3f5134a8f5bd7fa38b5645eef05e8a4eb62951.tar.gz |
parisc: fix kernel crash when unwinding a userspace process
Any user on existing parisc 32- and 64bit-kernels can easily crash
the kernel and as such enforce a DSO.
A simple testcase is available here:
http://gsyprf10.external.hp.com/~deller/crash.tgz
The problem is introduced by the fact, that the handle_interruption()
crash handler calls the show_regs() function, which in turn tries to
unwind the stack by calling parisc_show_stack(). Since the stack contains
userspace addresses, a try to unwind the stack is dangerous and useless
and leads to the crash.
The fix is trivial: For userspace processes
a) avoid to unwind the stack, and
b) avoid to resolve userspace addresses to kernel symbol names.
While touching this code, I converted print_symbol() to %pS
printk formats and made parisc_show_stack() static.
An initial patch for this was written by Kyle McMartin back in August:
http://marc.info/?l=linux-parisc&m=121805168830283&w=2
Compile and run-tested with a 64bit parisc kernel.
Signed-off-by: Helge Deller <deller@gmx.de>
Cc: Grant Grundler <grundler@parisc-linux.org>
Cc: Matthew Wilcox <matthew@wil.cx>
Cc: <stable@kernel.org> [2.6.25.x, 2.6.26.x, 2.6.27.x, earlier...]
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Kyle McMartin <kyle@mcmartin.ca>
Diffstat (limited to 'drivers/tc')
0 files changed, 0 insertions, 0 deletions