summaryrefslogtreecommitdiff
path: root/drivers/misc/vmw_vmci/vmci_driver.c
diff options
context:
space:
mode:
authorJorgen Hansen <jhansen@vmware.com>2015-01-14 22:10:19 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2015-01-25 20:18:00 +0300
commita1d88436d53a75e950db15834b3d2f8c0c358fdc (patch)
treea1c852aa45acec5f487e0d61706b7dbe57eaea90 /drivers/misc/vmw_vmci/vmci_driver.c
parent3f46d81ae1cf8f20f25c39ae1ab3f1b064698361 (diff)
downloadlinux-a1d88436d53a75e950db15834b3d2f8c0c358fdc.tar.xz
VMCI: Fix two UVA mapping bugs
(this is a resend of this patch. Originally sent last year, but post appears to have been lost) This change fixes two bugs in the VMCI host driver related to mapping the notify boolean from user space into kernel space: - the actual UVA was rounded up to the next page boundary - resulting in memory corruption in the calling process whenever notifications would be signalled. This has been fixed by just removing the PAGE_ALIGN part, since get_user_pages_fast can figure this out on its own - the mapped page wasn't stored anywhere, so it wasn't unmapped and put back when a VMCI context was destroyed. Fixed this by remembering the page. Acked-by: Andy King <acking@vmware.com> Acked-by: Darius Davis <darius@vmware.com> Signed-off-by: Jorgen Hansen <jhansen@vmware.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/misc/vmw_vmci/vmci_driver.c')
-rw-r--r--drivers/misc/vmw_vmci/vmci_driver.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/misc/vmw_vmci/vmci_driver.c b/drivers/misc/vmw_vmci/vmci_driver.c
index 3dee7ae123e7..032d35cf93ca 100644
--- a/drivers/misc/vmw_vmci/vmci_driver.c
+++ b/drivers/misc/vmw_vmci/vmci_driver.c
@@ -113,5 +113,5 @@ module_exit(vmci_drv_exit);
MODULE_AUTHOR("VMware, Inc.");
MODULE_DESCRIPTION("VMware Virtual Machine Communication Interface.");
-MODULE_VERSION("1.1.0.0-k");
+MODULE_VERSION("1.1.1.0-k");
MODULE_LICENSE("GPL v2");