• Cliff Wickman's avatar
    x86, SGI UV: TLB shootdown using broadcast assist unit, v6 · cef53278
    Cliff Wickman authored
    v6: 6/19 close the security hole in uv_ptc_proc_write())
    
      > Found a potential security hole while doing that:
      > static ssize_t uv_ptc_proc_write(struct file *file, const char __user *user,
      >                              size_t count, loff_t *data)
      >     if (copy_from_user(optstr, user, count))
      >             return -EFAULT;
      >
      > is count guaranteed to never be larger than 64?
    
    is fixed below.
    
    It adds tlb_uv.o to the Makefile.
    Signed-off-by: default avatarCliff Wickman <cpw@sgi.com>
    Cc: mingo@elte.hu
    Signed-off-by: default avatarIngo Molnar <mingo@elte.hu>
    cef53278
tlb_uv.c 20.5 KB