linux-stable/drivers/misc/cxl
Ian Munsie 10a5894f2d cxl: Fix off by one error allowing subsequent mmap page to be accessed
It was discovered that if a process mmaped their problem state area they
were able to access one page more than expected, potentially allowing
them to access the problem state area of an unrelated process.

This was due to a simple off by one error in the mmap fault handler
introduced in 0712dc7e73 ("cxl: Fix issues
when unmapping contexts"), which is fixed in this patch.

Cc: stable@vger.kernel.org
Fixes: 0712dc7e73 ("cxl: Fix issues when unmapping contexts")
Signed-off-by: Ian Munsie <imunsie@au1.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
2015-07-08 15:17:47 +10:00
..
api.c cxl: Fix refcounting in kernel API 2015-07-07 19:38:37 +10:00
base.c cxl: Move include file cxl.h -> cxl-base.h 2015-06-03 13:27:19 +10:00
context.c cxl: Fix off by one error allowing subsequent mmap page to be accessed 2015-07-08 15:17:47 +10:00
cxl.h cxl: Add AFU virtual PHB and kernel API 2015-06-03 13:27:20 +10:00
debugfs.c
fault.c cxl: Only check pid for userspace contexts 2015-06-03 13:27:18 +10:00
file.c cxl: Export file ops for use by API 2015-06-03 13:27:20 +10:00
irq.c cxl: Move include file cxl.h -> cxl-base.h 2015-06-03 13:27:19 +10:00
Kconfig cxl: Add CXL_KERNEL_API config option 2015-06-19 17:10:30 +10:00
main.c cxl: Move include file cxl.h -> cxl-base.h 2015-06-03 13:27:19 +10:00
Makefile cxl: Add AFU virtual PHB and kernel API 2015-06-03 13:27:20 +10:00
native.c cxl: Move include file cxl.h -> cxl-base.h 2015-06-03 13:27:19 +10:00
pci.c cxl: Test the correct mmio space before unmapping 2015-07-06 20:24:35 +10:00
sysfs.c cxl: cxl_afu_reset() -> __cxl_afu_reset() 2015-06-03 13:27:18 +10:00
trace.c cxl: Add tracepoints 2015-01-22 17:31:51 +11:00
trace.h cxl: Add tracepoints 2015-01-22 17:31:51 +11:00
vphb.c cxl/vphb.c: Use phb pointer after NULL check 2015-07-06 20:24:34 +10:00