Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp181493imm; Tue, 17 Jul 2018 16:36:34 -0700 (PDT) X-Google-Smtp-Source: AAOMgpehy9zeVAd2uUB39KB1Q7YodJyUtqlsoq0DUlw5XnP3ebk+IhAEtNXCjYkMhYvRGJJhBCKL X-Received: by 2002:a62:930c:: with SMTP id b12-v6mr2669460pfe.193.1531870594304; Tue, 17 Jul 2018 16:36:34 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1531870594; cv=none; d=google.com; s=arc-20160816; b=fbgGv+gkkIyqcMQKRiu5KnXOmXS583vByVZ/ZfdOzO02jFC/HRiuXHETH8Eo9cNDo8 5FT+y3KlJAjV77z/QJZHk84v2COzI3Vtuff0fm9Nk1RBr7EXYwJWsB4InUyFxVpVG1ZI 4mG0PLsVo3Emha9XApvUm+Ap3NcyBkuWPhF9Focx++G3tNC/fcl8t93AAM1oIDcXJF9l LFXJoQbZ9PQGQb79xdjCO4AYDo9qam5bBbZNpKP85PdgsfrSpgncNp3nwy5SzPWtyRUA nOXTotEW8zEES7oaAwUY5y+qPnwMkcBTeElBJF9s5YGOdT23UENAPzogMbZBXcyrELNy TGCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:subject:cc:to:from :arc-authentication-results; bh=UoYVQ7VpaEo4daaj7O9OWNBwqTagimI3meMLcYUUFp0=; b=p5zfTqYewS9aSARpI2xCqEn6OiGPG5ynVLofa789boGFyvqWCfftIam4UePfElQaDq HrAs4CFVtVrXAuX1XgaZcG80SxED73CKLp0O1H3ft7rGqnde0vMNpY0t3qhh2l7WKOj4 /liEz/5gFNbjNmG1f4IaFQfqyZy4+cZ6zhoffX4DW0wTcRoYZlUifiP/8D+1H2BOU1eL 11xUSEd/A4eh8gRJR5Y4/EVH+rL5+XJdPPn2VbTeB7JZm20OPh06PJRRx92y170rOb15 ugXsBhMbs++jkyooPPUxrBz2cayvlBtZxK7PL6h8TdhAk9tb/S4//L6nqVnlaO1Ni/sf MCjg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id c62-v6si2072824pfb.98.2018.07.17.16.36.18; Tue, 17 Jul 2018 16:36:34 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1730480AbeGRAKk (ORCPT + 99 others); Tue, 17 Jul 2018 20:10:40 -0400 Received: from out1.zte.com.cn ([202.103.147.172]:49270 "EHLO mxct.zte.com.cn" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1729840AbeGRAKk (ORCPT ); Tue, 17 Jul 2018 20:10:40 -0400 Received: from mse01.zte.com.cn (unknown [10.30.3.20]) by Forcepoint Email with ESMTPS id 2D2BD4F96E66FF6D06AA; Wed, 18 Jul 2018 07:35:39 +0800 (CST) Received: from notes_smtp.zte.com.cn ([10.30.1.239]) by mse01.zte.com.cn with ESMTP id w6HNZXwV083552; Wed, 18 Jul 2018 07:35:33 +0800 (GMT-8) (envelope-from jiang.biao2@zte.com.cn) Received: from localhost.localdomain ([10.75.10.200]) by szsmtp06.zte.com.cn (Lotus Domino Release 8.5.3FP6) with ESMTP id 2018071807353726-761861 ; Wed, 18 Jul 2018 07:35:37 +0800 From: Jiang Biao To: tglx@linutronix.de, mingo@redhat.com Cc: dave.hansen@linux.intel.com, luto@kernel.org, hpa@zytor.com, x86@kernel.org, albcamus@gmail.com, linux-kernel@vger.kernel.org, zhong.weidong@zte.com.cn, jiang.biao2@zte.com.cn Subject: [PATCH v3 1/2] x86/pti: check the return value of pti_user_pagetable_walk_p4d Date: Wed, 18 Jul 2018 07:29:22 +0800 Message-Id: <1531870163-39088-1-git-send-email-jiang.biao2@zte.com.cn> X-Mailer: git-send-email 1.8.3.1 X-MIMETrack: Itemize by SMTP Server on SZSMTP06/server/zte_ltd(Release 8.5.3FP6|November 21, 2013) at 2018-07-18 07:35:37, Serialize by Router on notes_smtp/zte_ltd(Release 9.0.1FP7|August 17, 2016) at 2018-07-18 07:35:25, Serialize complete at 2018-07-18 07:35:25 X-MAIL: mse01.zte.com.cn w6HNZXwV083552 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org pti_user_pagetable_walk_p4d() may return NULL, we should check the return value to avoid NULL pointer dereference. And add warning for fail allocation where NULL returned. Signed-off-by: Jiang Biao --- arch/x86/mm/pti.c | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/arch/x86/mm/pti.c b/arch/x86/mm/pti.c index 4d418e7..5c33a16 100644 --- a/arch/x86/mm/pti.c +++ b/arch/x86/mm/pti.c @@ -176,7 +176,7 @@ static p4d_t *pti_user_pagetable_walk_p4d(unsigned long address) if (pgd_none(*pgd)) { unsigned long new_p4d_page = __get_free_page(gfp); - if (!new_p4d_page) + if (WARN_ON(!new_p4d_page)) return NULL; set_pgd(pgd, __pgd(_KERNPG_TABLE | __pa(new_p4d_page))); @@ -195,9 +195,12 @@ static p4d_t *pti_user_pagetable_walk_p4d(unsigned long address) static pmd_t *pti_user_pagetable_walk_pmd(unsigned long address) { gfp_t gfp = (GFP_KERNEL | __GFP_NOTRACK | __GFP_ZERO); - p4d_t *p4d = pti_user_pagetable_walk_p4d(address); pud_t *pud; + p4d_t *p4d = pti_user_pagetable_walk_p4d(address); + if (!p4d) + return NULL; + BUILD_BUG_ON(p4d_large(*p4d) != 0); if (p4d_none(*p4d)) { unsigned long new_pud_page = __get_free_page(gfp); @@ -354,6 +357,9 @@ static void __init pti_clone_p4d(unsigned long addr) pgd_t *kernel_pgd; user_p4d = pti_user_pagetable_walk_p4d(addr); + if (!user_p4d) + return; + kernel_pgd = pgd_offset_k(addr); kernel_p4d = p4d_offset(kernel_pgd, addr); *user_p4d = *kernel_p4d; -- 2.7.4