<feed xmlns='http://www.w3.org/2005/Atom'>
<title>kernel.git/arch/s390/lib/uaccess_std.c, branch linux-2.6.37.y</title>
<subtitle>Hosts the 0x221E linux distro kernel.
</subtitle>
<id>https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-2.6.37.y</id>
<link rel='self' href='https://git.0xinfinity.dev/distro/kernel.git/atom?h=linux-2.6.37.y'/>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/'/>
<updated>2009-10-06T08:35:10Z</updated>
<entry>
<title>[S390] Add EX_TABLE for addressing exception in usercopy functions.</title>
<updated>2009-10-06T08:35:10Z</updated>
<author>
<name>Gerald Schaefer</name>
</author>
<published>2009-10-06T08:34:14Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=af9d2ff9afaae8040dbf09238b2579f92c93579e'/>
<id>urn:sha1:af9d2ff9afaae8040dbf09238b2579f92c93579e</id>
<content type='text'>
This patch adds an EX_TABLE entry to mvc{p|s|os} usercopy functions that
may be called with KERNEL_DS. In combination with collaborative memory
management, kernel pages marked as unused may trigger an adressing exception
in the usercopy functions. This fixes an unhandled addressing exception bug
where strncpy_from_user() is used with len &gt; strnlen and KERNEL_DS, crossing
a page boundary to an unused page.

Signed-off-by: Gerald Schaefer &lt;gerald.schaefer@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[S390] Fix futex_atomic_cmpxchg_std inline assembly.</title>
<updated>2008-02-19T14:29:35Z</updated>
<author>
<name>Heiko Carstens</name>
</author>
<published>2008-02-19T14:29:34Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=d5b02b3ff1d9a2e1074f559c84ed378cfa6fc3c0'/>
<id>urn:sha1:d5b02b3ff1d9a2e1074f559c84ed378cfa6fc3c0</id>
<content type='text'>
Add missing exception table entry so that the kernel can handle
proctection exceptions as well on the cs instruction. Currently only
specification exceptions are handled correctly.
The missing entry allows user space to crash the kernel.

Cc: stable &lt;stable@kernel.org&gt;
Signed-off-by: Heiko Carstens &lt;heiko.carstens@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[S390] Get rid of a lot of sparse warnings.</title>
<updated>2007-02-05T20:16:47Z</updated>
<author>
<name>Heiko Carstens</name>
</author>
<published>2007-02-05T20:16:47Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=2b67fc46061b2171fb8fbb55d1ac717abd533569'/>
<id>urn:sha1:2b67fc46061b2171fb8fbb55d1ac717abd533569</id>
<content type='text'>
Signed-off-by: Heiko Carstens &lt;heiko.carstens@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[S390] don't call handle_mm_fault() if in an atomic context.</title>
<updated>2007-01-09T09:18:50Z</updated>
<author>
<name>Heiko Carstens</name>
</author>
<published>2007-01-09T09:18:50Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=d8ad075ef60ca33f1bd8e227eed2202108fd6cd8'/>
<id>urn:sha1:d8ad075ef60ca33f1bd8e227eed2202108fd6cd8</id>
<content type='text'>
There are several places in the futex code where a spin_lock is held
and still uaccesses happen. Deadlocks are avoided by increasing the
preempt count. The pagefault handler will then not take any locks
but will immediately search the fixup tables.

Signed-off-by: Heiko Carstens &lt;heiko.carstens@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[PATCH] mm: pagefault_{disable,enable}()</title>
<updated>2006-12-07T16:39:21Z</updated>
<author>
<name>Peter Zijlstra</name>
</author>
<published>2006-12-07T04:32:20Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=a866374aecc90c7d90619727ccd851ac096b2fc7'/>
<id>urn:sha1:a866374aecc90c7d90619727ccd851ac096b2fc7</id>
<content type='text'>
Introduce pagefault_{disable,enable}() and use these where previously we did
manual preempt increments/decrements to make the pagefault handler do the
atomic thing.

Currently they still rely on the increased preempt count, but do not rely on
the disabled preemption, this might go away in the future.

(NOTE: the extra barrier() in pagefault_disable might fix some holes on
       machines which have too many registers for their own good)

[heiko.carstens@de.ibm.com: s390 fix]
Signed-off-by: Peter Zijlstra &lt;a.p.zijlstra@chello.nl&gt;
Acked-by: Nick Piggin &lt;npiggin@suse.de&gt;
Cc: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
Signed-off-by: Heiko Carstens &lt;heiko.carstens@de.ibm.com&gt;
Signed-off-by: Andrew Morton &lt;akpm@osdl.org&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@osdl.org&gt;
</content>
</entry>
<entry>
<title>[S390] Add dynamic size check for usercopy functions.</title>
<updated>2006-12-04T14:40:45Z</updated>
<author>
<name>Gerald Schaefer</name>
</author>
<published>2006-12-04T14:40:45Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=59f35d53fde3987d071ea1c9bf1c9ba29fcb69fe'/>
<id>urn:sha1:59f35d53fde3987d071ea1c9bf1c9ba29fcb69fe</id>
<content type='text'>
Use a wrapper for copy_to/from_user to chose the best usercopy method.
The mvcos instruction is better for sizes greater than 256 bytes, if
mvcos is not available a page table walk is better for sizes greater
than 1024 bytes. Also removed the redundant copy_to/from_user_std_small
functions.

Signed-off-by: Gerald Schaefer &lt;geraldsc@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[S390] user readable uninitialised kernel memory.</title>
<updated>2006-09-28T14:56:03Z</updated>
<author>
<name>Martin Schwidefsky</name>
</author>
<published>2006-09-28T14:56:03Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=52149ba6b0ddf3e9d965257cc0513193650b3ea8'/>
<id>urn:sha1:52149ba6b0ddf3e9d965257cc0513193650b3ea8</id>
<content type='text'>
A user space program can read uninitialised kernel memory
by appending to a file from a bad address and then reading
the result back. The cause is the copy_from_user function
that does not clear the remaining bytes of the kernel
buffer after it got a fault on the user space address.

Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
<entry>
<title>[S390] Make user-copy operations run-time configurable.</title>
<updated>2006-09-20T13:59:42Z</updated>
<author>
<name>Gerald Schaefer</name>
</author>
<published>2006-09-20T13:59:42Z</published>
<link rel='alternate' type='text/html' href='https://git.0xinfinity.dev/distro/kernel.git/commit/?id=d02765d1af743567398eb6d523dea0ba5e5e7e8e'/>
<id>urn:sha1:d02765d1af743567398eb6d523dea0ba5e5e7e8e</id>
<content type='text'>
Introduces a struct uaccess_ops which allows setting user-copy
operations at run-time.

Signed-off-by: Gerald Schaefer &lt;geraldsc@de.ibm.com&gt;
Signed-off-by: Martin Schwidefsky &lt;schwidefsky@de.ibm.com&gt;
</content>
</entry>
</feed>
