powerpc: Fail ioremap() instead of silently ignoring flags when PAGE_USER is set
authorChristophe Leroy <christophe.leroy@csgroup.eu>
Mon, 25 Sep 2023 18:31:36 +0000 (20:31 +0200)
committerMichael Ellerman <mpe@ellerman.id.au>
Thu, 19 Oct 2023 06:12:46 +0000 (17:12 +1100)
Calling ioremap() with _PAGE_USER (or _PAGE_PRIVILEDGE unset)
is wrong. Loudly fail the call to ioremap() instead of blindly
clearing the flags.

Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://msgid.link/b6dd5485ad00d2aafd2bb9b7c2c4eac3ebf2cdaf.1695659959.git.christophe.leroy@csgroup.eu
arch/powerpc/mm/ioremap.c

index d5159f20538006ece4a9263d12b49d8352f32899..7823c38f09deeafaae518d3bcef7260274f44886 100644 (file)
@@ -51,7 +51,8 @@ void __iomem *ioremap_prot(phys_addr_t addr, size_t size, unsigned long flags)
                pte = pte_mkdirty(pte);
 
        /* we don't want to let _PAGE_USER leak out */
-       pte = pte_mkprivileged(pte);
+       if (WARN_ON(pte_user(pte)))
+               return NULL;
 
        if (iowa_is_active())
                return iowa_ioremap(addr, size, pte_pgprot(pte), caller);