linux/drivers/misc/vmw_vmci
Jorgen Hansen a1d88436d5 VMCI: Fix two UVA mapping bugs
(this is a resend of this patch. Originally sent last year, but post
 appears to have been lost)

This change fixes two bugs in the VMCI host driver related to mapping
the notify boolean from user space into kernel space:
- the actual UVA was rounded up to the next page boundary - resulting
  in memory corruption in the calling process whenever notifications
  would be signalled. This has been fixed by just removing the
  PAGE_ALIGN part, since get_user_pages_fast can figure this out on
  its own
- the mapped page wasn't stored anywhere, so it wasn't unmapped and
  put back when a VMCI context was destroyed. Fixed this by
  remembering the page.

Acked-by: Andy King <acking@vmware.com>
Acked-by: Darius Davis <darius@vmware.com>
Signed-off-by: Jorgen Hansen <jhansen@vmware.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2015-01-25 09:18:00 -08:00
..
Kconfig Hoist memcpy_fromiovec/memcpy_toiovec into lib/ 2013-05-20 10:24:22 +09:30
Makefile VMCI: Some header and config files. 2013-01-08 16:15:57 -08:00
vmci_context.c
vmci_context.h
vmci_datagram.c VMCI: integer overflow in vmci_datagram_dispatch() 2014-09-23 23:26:42 -07:00
vmci_datagram.h
vmci_doorbell.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
vmci_doorbell.h VMCI: doorbell implementation. 2013-01-08 16:15:55 -08:00
vmci_driver.c VMCI: Fix two UVA mapping bugs 2015-01-25 09:18:00 -08:00
vmci_driver.h VMCI: Add support for virtual IOMMU 2013-08-27 21:42:12 -07:00
vmci_event.c VMCI: event handling implementation. 2013-01-08 16:15:55 -08:00
vmci_event.h VMCI: event handling implementation. 2013-01-08 16:15:55 -08:00
vmci_guest.c PCI: Move PCI_VENDOR_ID_VMWARE to pci_ids.h 2014-09-24 11:52:09 -06:00
vmci_handle_array.c VMCI: handle array implementation. 2013-01-08 16:15:55 -08:00
vmci_handle_array.h VMCI: handle array implementation. 2013-01-08 16:15:55 -08:00
vmci_host.c VMCI: Fix two UVA mapping bugs 2015-01-25 09:18:00 -08:00
vmci_queue_pair.c vmci: propagate msghdr all way down to __qp_memcpy_from_queue() 2014-12-09 16:28:23 -05:00
vmci_queue_pair.h VMCI: Remove non-blocking/pinned queuepair support 2013-08-27 21:42:12 -07:00
vmci_resource.c hlist: drop the node parameter from iterators 2013-02-27 19:10:24 -08:00
vmci_resource.h VMCI: resource object implementation. 2013-01-08 16:15:56 -08:00
vmci_route.c VMCI: routing implementation. 2013-01-08 16:15:56 -08:00
vmci_route.h VMCI: routing implementation. 2013-01-08 16:15:56 -08:00