linux

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-09-28 19:20:30 +00:00

Michael Neuling d2b9d2a5ad powerpc/tm: Block signal return setting invalid MSR state Currently we allow both the MSR T and S bits to be set by userspace on a signal return. Unfortunately this is a reserved configuration and will cause a TM Bad Thing exception if attempted (via rfid). This patch checks for this case in both the 32 and 64 bit signals code. If both T and S are set, we mark the context as invalid. Found using a syscall fuzzer. Fixes: `2b0a576d15` ("powerpc: Add new transactional memory state to the signal context") Cc: stable@vger.kernel.org # v3.9+ Signed-off-by: Michael Neuling <mikey@neuling.org> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>	History 2015-11-23 20:06:31 +11:00
..
asm	powerpc/tm: Block signal return setting invalid MSR state	2015-11-23 20:06:31 +11:00
uapi/asm	powerpc: Wire up sys_mlock2()	2015-11-16 17:05:53 +11:00

Michael Neuling d2b9d2a5ad powerpc/tm: Block signal return setting invalid MSR state

Currently we allow both the MSR T and S bits to be set by userspace on
a signal return.  Unfortunately this is a reserved configuration and
will cause a TM Bad Thing exception if attempted (via rfid).

This patch checks for this case in both the 32 and 64 bit signals
code.  If both T and S are set, we mark the context as invalid.

Found using a syscall fuzzer.

Fixes: 2b0a576d15 ("powerpc: Add new transactional memory state to the signal context")
Cc: stable@vger.kernel.org # v3.9+
Signed-off-by: Michael Neuling <mikey@neuling.org>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>

History

2015-11-23 20:06:31 +11:00

asm powerpc/tm: Block signal return setting invalid MSR state 2015-11-23 20:06:31 +11:00

uapi/asm powerpc: Wire up sys_mlock2() 2015-11-16 17:05:53 +11:00