The patch titled Subject: mm/memory.c: actually remap enough memory has been removed from the -mm tree. Its filename was mm-actually-remap-enough-memory.patch
This patch was dropped because it was merged into mainline or a subsystem tree ------------------------------------------------------ From: Grazvydas Ignotas <nota...@gmail.com> Subject: mm/memory.c: actually remap enough memory For whatever reason, generic_access_phys() only remaps one page, but actually allows to access arbitrary size. It's quite easy to trigger large reads, like printing out large structure with gdb, which leads to a crash. Fix it by remapping correct size. Fixes: 28b2ee20c7cb ("access_process_vm device memory infrastructure") Signed-off-by: Grazvydas Ignotas <nota...@gmail.com> Cc: Rik van Riel <r...@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <a...@linux-foundation.org> --- mm/memory.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN mm/memory.c~mm-actually-remap-enough-memory mm/memory.c --- a/mm/memory.c~mm-actually-remap-enough-memory +++ a/mm/memory.c @@ -3462,7 +3462,7 @@ int generic_access_phys(struct vm_area_s if (follow_phys(vma, addr, write, &prot, &phys_addr)) return -EINVAL; - maddr = ioremap_prot(phys_addr, PAGE_SIZE, prot); + maddr = ioremap_prot(phys_addr, PAGE_ALIGN(len + offset), prot); if (write) memcpy_toio(maddr + offset, buf, len); else _ Patches currently in -mm which might be from nota...@gmail.com are origin.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html