sparc: fix livelock in uaccess
authorAl Viro <viro@zeniv.linux.org.uk>
Tue, 31 Jan 2023 05:03:40 +0000 (00:03 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Thu, 2 Mar 2023 17:32:19 +0000 (12:32 -0500)
sparc equivalent of 26178ec11ef3 "x86: mm: consolidate VM_FAULT_RETRY handling"
If e.g. get_user() triggers a page fault and a fatal signal is caught, we might
end up with handle_mm_fault() returning VM_FAULT_RETRY and not doing anything
to page tables.  In such case we must *not* return to the faulting insn -
that would repeat the entire thing without making any progress; what we need
instead is to treat that as failed (user) memory access.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
arch/sparc/mm/fault_32.c
arch/sparc/mm/fault_64.c

index 91259f2..179295b 100644 (file)
@@ -187,8 +187,11 @@ good_area:
         */
        fault = handle_mm_fault(vma, address, flags, regs);
 
-       if (fault_signal_pending(fault, regs))
+       if (fault_signal_pending(fault, regs)) {
+               if (!from_user)
+                       goto no_context;
                return;
+       }
 
        /* The fault is fully completed (including releasing mmap lock) */
        if (fault & VM_FAULT_COMPLETED)
index 4acc12e..d91305d 100644 (file)
@@ -424,8 +424,13 @@ good_area:
 
        fault = handle_mm_fault(vma, address, flags, regs);
 
-       if (fault_signal_pending(fault, regs))
+       if (fault_signal_pending(fault, regs)) {
+               if (regs->tstate & TSTATE_PRIV) {
+                       insn = get_fault_insn(regs, insn);
+                       goto handle_kernel_fault;
+               }
                goto exit_exception;
+       }
 
        /* The fault is fully completed (including releasing mmap lock) */
        if (fault & VM_FAULT_COMPLETED)