commit d5812a77e5803468a5033be91af978be0f7a17d9
author Paul Mackerras <paulus@samba.org> Sun May 01 08:58:42 2005 -0700
committer Linus Torvalds <torvalds@ppc970.osdl.org> Sun May 01 08:58:42 2005 -0700
tree e01d079528be80ee78fad247b8af959b58e41d0e
parent b20cc8aff258eea5a2339107605ebea949fa6ecf

[PATCH] ppc32: Fix address checking on lmw/stmw align exception

The handling of misaligned load/store multiple instructions did not check
to see if the address was ok to access before using __{get,put}_user().

Signed-off-by: Kumar Gala <kumar.gala@freescale.com>
Signed-off-by: Paul Mackerras <paulus@samba.org>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>

arch/ppc/kernel/align.c

diff --git a/arch/ppc/kernel/align.c b/arch/ppc/kernel/align.c
index 40d356c..ff81da9 100644
--- a/arch/ppc/kernel/align.c
+++ b/arch/ppc/kernel/align.c
@@ -290,6 +290,10 @@
 			/* lwm, stmw */
 			nb = (32 - reg) * 4;
 		}
+
+		if (!access_ok((flags & ST? VERIFY_WRITE: VERIFY_READ), addr, nb+nb0))
+			return -EFAULT;	/* bad address */
+
 		rptr = (unsigned char *) &regs->gpr[reg];
 		if (flags & LD) {
 			for (i = 0; i < nb; ++i)