From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail6.bemta7.messagelabs.com (mail6.bemta7.messagelabs.com [216.82.255.55]) by kanga.kvack.org (Postfix) with ESMTP id 8D7A46B002C for ; Wed, 12 Oct 2011 16:42:28 -0400 (EDT) Received: by pzk4 with SMTP id 4so955570pzk.6 for ; Wed, 12 Oct 2011 13:42:25 -0700 (PDT) Date: Wed, 12 Oct 2011 13:42:24 -0700 From: Andrew Morton Subject: Re: [PATCH] mm/huge_memory: Clean up typo when copying user highpage Message-Id: <20111012134224.786191ac.akpm@linux-foundation.org> In-Reply-To: <20111012175148.GA27460@redhat.com> References: <20111012175148.GA27460@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-linux-mm@kvack.org List-ID: To: Andrea Arcangeli Cc: Hillf Danton , LKML , linux-mm@kvack.org On Wed, 12 Oct 2011 19:51:48 +0200 Andrea Arcangeli wrote: > On Wed, Oct 12, 2011 at 10:39:36PM +0800, Hillf Danton wrote: > > Hi Andrea > > > > When copying user highpage, the PAGE_SHIFT in the third parameter is a typo, > > I think, and is replaced with PAGE_SIZE. > > That looks correct. I wonder how it was not noticed yet. Because it > can't go out of bound, it didn't risk to crash the kernel and it didn't > not risk to expose random data to the cowing task. So it shouldn't > have security implications as far as I can tell, but the app could > malfunction and crash (userland corruption only). Which architectures care about the copy_user_page() `vaddr' argument? mips, perhaps? I suspect the intersection between those architectures and archs-which-implement-hugepages is the empty set. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: email@kvack.org