acca4f4d9b
There was a race in the kmap_coherent() implementation. While we guarded against preemption, there was nothing preventing eviction of the pre-faulted fixmap entry from the UTLB. Under certain workloads this would result in the fixmap entries used for cache colouring being evicted from the UTLB in the midst of a copy_page(). In addition to pre-faulting, we also make sure to preserve the PTEs in the kernel page table and introduce a cached PTE for kmap_coherent() usage. This follows a similar change on MIPS ("[MIPS] Fix aliasing bug in copy_to_user_page / copy_from_user_page"). Reported-by: Hideo Saito <saito@densan.co.jp> Reported-by: CHIKAMA Masaki <masaki.chikama@gmail.com> Tested-by: Yoshihiro Shimoda <shimoda.yoshihiro@renesas.com> Signed-off-by: Paul Mundt <lethal@linux-sh.org> |
||
---|---|---|
.. | ||
.gitignore | ||
adc.h | ||
addrspace.h | ||
atomic-grb.h | ||
atomic-irq.h | ||
atomic-llsc.h | ||
atomic.h | ||
auxvec.h | ||
bitops-grb.h | ||
bitops-irq.h | ||
bitops-llsc.h | ||
bitops.h | ||
bug.h | ||
bugs.h | ||
byteorder.h | ||
cache.h | ||
cacheflush.h | ||
checksum_32.h | ||
checksum_64.h | ||
checksum.h | ||
clock.h | ||
cmpxchg-grb.h | ||
cmpxchg-irq.h | ||
cmpxchg-llsc.h | ||
cpu-features.h | ||
cputime.h | ||
current.h | ||
delay.h | ||
device.h | ||
div64.h | ||
dma-mapping.h | ||
dma.h | ||
dmabrg.h | ||
elf.h | ||
emergency-restart.h | ||
entry-macros.S | ||
errno.h | ||
fb.h | ||
fcntl.h | ||
fixmap.h | ||
flat.h | ||
fpu.h | ||
freq.h | ||
ftrace.h | ||
futex-irq.h | ||
futex.h | ||
gpio.h | ||
hardirq.h | ||
hd64461.h | ||
heartbeat.h | ||
hugetlb.h | ||
hw_irq.h | ||
i2c-sh7760.h | ||
ilsel.h | ||
io_generic.h | ||
io_trapped.h | ||
io.h | ||
ioctl.h | ||
ioctls.h | ||
ipcbuf.h | ||
irq_regs.h | ||
irq.h | ||
irqflags_32.h | ||
irqflags_64.h | ||
irqflags.h | ||
Kbuild | ||
kdebug.h | ||
kexec.h | ||
kgdb.h | ||
kmap_types.h | ||
kprobes.h | ||
linkage.h | ||
local.h | ||
machvec.h | ||
mc146818rtc.h | ||
mman.h | ||
mmu_context_32.h | ||
mmu_context_64.h | ||
mmu_context.h | ||
mmu.h | ||
mmzone.h | ||
module.h | ||
msgbuf.h | ||
mutex.h | ||
page.h | ||
param.h | ||
parport.h | ||
pci.h | ||
percpu.h | ||
pgalloc.h | ||
pgtable_32.h | ||
pgtable_64.h | ||
pgtable.h | ||
pm.h | ||
poll.h | ||
posix_types_32.h | ||
posix_types_64.h | ||
posix_types.h | ||
processor_32.h | ||
processor_64.h | ||
processor.h | ||
ptrace.h | ||
push-switch.h | ||
resource.h | ||
rtc.h | ||
rwsem.h | ||
scatterlist.h | ||
seccomp.h | ||
sections.h | ||
segment.h | ||
sembuf.h | ||
serial.h | ||
setup.h | ||
sfp-machine.h | ||
sh7760fb.h | ||
sh_bios.h | ||
sh_eth.h | ||
sh_keysc.h | ||
shmbuf.h | ||
shmparam.h | ||
sigcontext.h | ||
siginfo.h | ||
signal.h | ||
sizes.h | ||
smc37c93x.h | ||
smp.h | ||
socket.h | ||
sockios.h | ||
sparsemem.h | ||
spi.h | ||
spinlock_types.h | ||
spinlock.h | ||
stat.h | ||
statfs.h | ||
string_32.h | ||
string_64.h | ||
string.h | ||
syscall_32.h | ||
syscall_64.h | ||
syscall.h | ||
syscalls_32.h | ||
syscalls_64.h | ||
syscalls.h | ||
system_32.h | ||
system_64.h | ||
system.h | ||
termbits.h | ||
termios.h | ||
thread_info.h | ||
timer.h | ||
timex.h | ||
tlb_64.h | ||
tlb.h | ||
tlbflush.h | ||
topology.h | ||
types.h | ||
uaccess_32.h | ||
uaccess_64.h | ||
uaccess.h | ||
ubc.h | ||
ucontext.h | ||
unaligned.h | ||
unistd_32.h | ||
unistd_64.h | ||
unistd.h | ||
user.h | ||
vga.h | ||
watchdog.h | ||
xor.h |