diff options
| author | Hugh Dickins <[email protected]> | 2016-02-17 21:11:23 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2016-02-19 00:23:24 +0000 |
| commit | 457a98b0809fa6cde7aab8c314a59d99772b445e (patch) | |
| tree | 61fd434ac02707ba73f84db22a802215dd8469cf /fs/jbd2/commit.c | |
| parent | fsnotify: turn fsnotify reaper thread into a workqueue job (diff) | |
| download | kernel-457a98b0809fa6cde7aab8c314a59d99772b445e.tar.gz kernel-457a98b0809fa6cde7aab8c314a59d99772b445e.zip | |
mm, x86: fix pte_page() crash in gup_pte_range()
Commit 3565fce3a659 ("mm, x86: get_user_pages() for dax mappings") has
moved up the pte_page(pte) in x86's fast gup_pte_range(), for no
discernible reason: put it back where it belongs, after the pte_flags
check and the pfn_valid cross-check.
That may be the cause of the NULL pointer dereference in
gup_pte_range(), seen when vfio called vaddr_get_pfn() when starting a
qemu-kvm based VM.
Signed-off-by: Hugh Dickins <[email protected]>
Reported-by: Michael Long <[email protected]>
Tested-by: Michael Long <[email protected]>
Acked-by: Dan Williams <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'fs/jbd2/commit.c')
0 files changed, 0 insertions, 0 deletions