On Mon, 7 Mar 2016 18:43:47 +0800 "Leizhen (ThunderTown)" 
<thunder.leiz...@huawei.com> wrote:

> Suppose:
> CONFIG_SPARSEMEM is opened.
> CONFIG_DMA_API_DEBUG or CONFIG_CMA is opened.
> 
> Then virt_to_page or phys_to_page will be called. Finally, in __pfn_to_page, 
> __sec = __pfn_to_section(__pfn) is NULL.
> So access section->section_mem_map will trigger exception.
> 
> ---------
> 
> #define __pfn_to_page(pfn)                            \
> ({    unsigned long __pfn = (pfn);                    \
>       struct mem_section *__sec = __pfn_to_section(__pfn);    \
>       __section_mem_map_addr(__sec) + __pfn;          \
> })
> 
> static inline struct page *__section_mem_map_addr(struct mem_section *section)
> {
>       unsigned long map = section->section_mem_map;
>       map &= SECTION_MAP_MASK;
>       return (struct page *)map;
> }

I'm having a bit of trouble understanding this.

Perhaps you could explain the bug more carefully (inclusion of an oops
output would help) then we'll be in a better position to understand the
proposed fix(es).

Thanks.

Reply via email to