Kees Cook f9ae153c05 UPSTREAM: usercopy: remove page-spanning test for now ...

A custom allocator without __GFP_COMP that copies to userspace has been
found in vmw_execbuf_process[1], so this disables the page-span checker
by placing it behind a CONFIG for future work where such things can be
tracked down later.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1373326

Reported-by: Vinson Lee <vlee@freedesktop.org>
Fixes: f5509cc18d ("mm: Hardened usercopy")
Signed-off-by: Kees Cook <keescook@chromium.org>

Change-Id: I4177c0fb943f14a5faf5c70f5e54bf782c316f43
(cherry picked from commit 8e1f74ea02)
Signed-off-by: Sami Tolvanen <samitolvanen@google.com>

2016-09-14 14:44:29 +05:30

..

kasan

kasan: fix kmemleak false-positive in kasan_module_alloc()

2015-11-20 16:17:32 -08:00

backing-dev.c

mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress

2016-02-17 12:31:06 -08:00

balloon_compaction.c

virtio_balloon: fix race between migration and ballooning

2016-03-03 15:07:18 -08:00

bootmem.c

bootmem: avoid freeing to bootmem after bootmem is done

2015-09-08 15:35:28 -07:00

cleancache.c

cleancache: remove limit on the number of cleancache enabled filesystems

2015-04-14 16:49:03 -07:00

cma_debug.c

mm/cma_debug: correct size input to bitmap function

2015-07-17 16:39:54 -07:00

cma.c

mm/cma.c: suppress warning

2015-11-05 19:34:48 -08:00

cma.h

mm: cma: mark cma_bitmap_maxno() inline in header

2015-08-14 15:56:32 -07:00

compaction.c

mm, compaction: prevent VM_BUG_ON when terminating freeing scanner

2016-08-10 11:49:25 +02:00

debug-pagealloc.c

…

debug.c

mm: make compound_head() robust

2015-11-06 17:50:42 -08:00

dmapool.c

mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd

2015-11-06 17:50:42 -08:00

early_ioremap.c

mm/early_ioremap: use offset_in_page macro

2015-11-05 19:34:48 -08:00

fadvise.c

writeback: implement and use inode_congested()

2015-06-02 08:33:35 -06:00

failslab.c

mm, page_alloc: rename __GFP_WAIT to __GFP_RECLAIM

2015-11-06 17:50:42 -08:00

filemap.c

mm, fs: introduce mapping_gfp_constraint()

2015-11-06 17:50:42 -08:00

frame_vector.c

mm: fix docbook comment for get_vaddr_frames()

2015-11-05 19:34:48 -08:00

frontswap.c

frontswap: allow multiple backends

2015-06-24 17:49:45 -07:00

gup.c

mm: introduce VM_LOCKONFAULT

2015-11-05 19:34:48 -08:00

highmem.c

…

huge_memory.c

mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check

2016-05-04 14:48:49 -07:00

hugetlb_cgroup.c

mm: make compound_head() robust

2015-11-06 17:50:42 -08:00

hugetlb.c

mm/hugetlb.c: fix resv map memory leak for placeholder entries

2015-12-12 10:15:34 -08:00

hwpoison-inject.c

hwpoison: use page_cgroup_ino for filtering by memcg

2015-09-10 13:29:01 -07:00

init-mm.c

…

internal.h

mm, sl[au]b: add __GFP_ATOMIC to the GFP reclaim mask

2016-08-10 11:49:25 +02:00

interval_tree.c

…

Kconfig

mm: make compound_head() robust

2015-11-06 17:50:42 -08:00

Kconfig.debug

…

kmemcheck.c

…

kmemleak-test.c

…

kmemleak.c

mm/kmemleak.c: remove unneeded initialization of object to NULL

2015-11-05 19:34:48 -08:00

ksm.c

ksm: unstable_tree_search_insert error checking cleanup

2015-11-05 19:34:48 -08:00

list_lru.c

memcg: simplify and inline __mem_cgroup_from_kmem

2015-11-05 19:34:48 -08:00

maccess.c

x86: remove more uaccess_32.h complexity

2016-08-27 11:23:38 +08:00

madvise.c

mm: add a field to store names for private anonymous memory

2016-02-16 13:54:13 -08:00

Makefile

mm: Hardened usercopy

2016-08-27 11:23:38 +08:00

memblock.c

mm/memblock: make memblock_remove_range() static

2015-11-05 19:34:48 -08:00

memcontrol.c

Merge branch 'linux-linaro-lsk-v4.4' into linux-linaro-lsk-v4.4-android

2016-08-18 12:33:31 +08:00

memory_hotplug.c

mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()

2015-12-29 17:45:49 -08:00

memory-failure.c

mm: soft-offline: check return value in second __get_any_page() call

2016-02-25 12:01:21 -08:00

memory.c

numa: fix /proc/<pid>/numa_maps for THP

2016-05-04 14:48:49 -07:00

mempolicy.c

mm: add a field to store names for private anonymous memory

2016-02-16 13:54:13 -08:00

mempool.c

mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd

2015-11-06 17:50:42 -08:00

memtest.c

memtest: remove unused header files

2015-09-08 15:35:28 -07:00

migrate.c

mm: Export migrate_page_move_mapping and migrate_page_copy

2016-07-27 09:47:31 -07:00

mincore.c

mm/mincore: use offset_in_page macro

2015-11-05 19:34:48 -08:00

mlock.c

Merge branch 'linux-linaro-lsk-v4.4' into linux-linaro-lsk-v4.4-android

2016-02-29 10:18:54 +08:00

mm_init.c

mm: meminit: remove mminit_verify_page_links

2015-06-30 19:44:56 -07:00

mmap.c

mm: Export do_munmap

2016-04-07 16:50:04 +05:30

mmu_context.c

…

mmu_notifier.c

mmu-notifier: add clear_young callback

2015-09-10 13:29:01 -07:00

mmzone.c

…

mprotect.c

mm: add a field to store names for private anonymous memory

2016-02-16 13:54:13 -08:00

mremap.c

mm/mremap: use offset_in_page macro

2015-11-05 19:34:48 -08:00

msync.c

mm/msync: use offset_in_page macro

2015-11-05 19:34:48 -08:00

nobootmem.c

mm: page_alloc: pass PFN to __free_pages_bootmem

2015-06-30 19:44:55 -07:00

nommu.c

mm/nommu.c: drop unlikely inside BUG_ON()

2015-11-05 19:34:48 -08:00

oom_kill.c

mm/oom_kill.c: avoid attempting to kill init sharing same memory

2015-12-12 10:15:34 -08:00

page_alloc.c

Merge branch 'linux-linaro-lsk-v4.4' into linux-linaro-lsk-v4.4-android

2016-08-11 12:15:55 +08:00

page_counter.c

mm: page_counter: let page_counter_try_charge() return bool

2015-11-05 19:34:48 -08:00

page_ext.c

mm: introduce idle page tracking

2015-09-10 13:29:01 -07:00

page_idle.c

mm: introduce idle page tracking

2015-09-10 13:29:01 -07:00

page_io.c

fs: use helper bio_add_page() instead of open coding on bi_io_vec

2015-08-13 12:32:00 -06:00

page_isolation.c

mm: fix invalid node in alloc_migrate_target()

2016-04-20 15:41:53 +09:00

page_owner.c

mm/page_owner: set correct gfp_mask on page_owner

2015-07-17 16:39:54 -07:00

page-writeback.c

writeback: use higher precision calculation in domain_dirty_limits()

2016-07-27 09:47:29 -07:00

pagewalk.c

mm/pagewalk.c: prevent positive return value of walk_page_test() from being passed to callers

2015-03-25 16:20:30 -07:00

percpu-km.c

…

percpu-vm.c

…

percpu.c

percpu: fix synchronization between synchronous map extension and chunk destruction

2016-07-27 09:47:33 -07:00

pgtable-generic.c

mm,thp: khugepaged: call pte flush at the time of collapse

2016-02-25 12:01:23 -08:00

process_vm_access.c

ptrace: use fsuid, fsgid, effective creds for fs access checks

2016-02-25 12:01:16 -08:00

quicklist.c

…

readahead.c

mm, fs: introduce mapping_gfp_constraint()

2015-11-06 17:50:42 -08:00

rmap.c

mm: page migration use migration entry for swapcache too

2015-11-05 19:34:48 -08:00

shmem.c

Merge branch 'linux-linaro-lsk-v4.4' into linux-linaro-lsk-v4.4-android

2016-07-29 21:38:37 +01:00

slab_common.c

mm: memcontrol: fix cgroup creation failure after many small jobs

2016-08-16 09:30:51 +02:00

slab.c

mm: SLAB hardened usercopy support

2016-08-27 11:23:38 +08:00

slab.h

slab/slub: adjust kmem_cache_alloc_bulk API

2015-11-22 11:58:44 -08:00

slob.c

slab/slub: adjust kmem_cache_alloc_bulk API

2015-11-22 11:58:44 -08:00

slub.c

UPSTREAM: mm/slub: support left redzone

2016-09-14 14:44:29 +05:30

sparse-vmemmap.c

…

sparse.c

…

swap_cgroup.c

…

swap_state.c

mm: swap: zswap: maybe_preload & refactoring

2015-09-08 15:35:28 -07:00

swap.c

mm: make compound_head() robust

2015-11-06 17:50:42 -08:00

swapfile.c

mm: /proc/pid/smaps:: show proportional swap share of the mapping

2015-09-08 15:35:28 -07:00

truncate.c

memcg: add per cgroup dirty page accounting

2015-06-02 08:33:33 -06:00

usercopy.c

UPSTREAM: usercopy: remove page-spanning test for now

2016-09-14 14:44:29 +05:30

userfaultfd.c

userfaultfd: avoid mmap_sem read recursion in mcopy_atomic

2015-09-04 16:54:41 -07:00

util.c

mm/util: use offset_in_page macro

2015-11-05 19:34:48 -08:00

vmacache.c

mm/vmacache: inline vmacache_valid_mm()

2015-11-05 19:34:48 -08:00

vmalloc.c

mm: vmalloc: don't remove inexistent guard hole in remove_vm_area()

2015-11-20 16:17:32 -08:00

vmpressure.c

…

vmscan.c

Revert "mm: vmscan: Add a debug file for shrinkers"

2016-05-19 12:35:13 +05:30

vmstat.c

vmstat: allocate vmstat_wq before it is used

2016-01-08 23:47:54 -08:00

workingset.c

list_lru: add helpers to isolate items

2015-02-12 18:54:10 -08:00

zbud.c

mm: zsmalloc: constify struct zs_pool name

2015-11-06 17:50:42 -08:00

zpool.c

mm: zsmalloc: constify struct zs_pool name

2015-11-06 17:50:42 -08:00

zsmalloc.c

zsmalloc: fix zs_can_compact() integer overflow

2016-05-18 17:06:44 -07:00

zswap.c

mm/zswap: provide unique zpool name

2016-05-11 11:21:14 +02:00