staging/lustre/lov: remove set_fs() call from lov_getstripe()
lov_getstripe() calls set_fs(KERNEL_DS) so that it can handle a struct lov_user_md pointer from user- or kernel-space. This changes the behavior of copy_from_user() on SPARC and may result in a misaligned access exception which in turn oopses the kernel. In fact the relevant argument to lov_getstripe() is never called with a kernel-space pointer and so changing the address limits is unnecessary and so we remove the calls to save, set, and restore the address limits. Signed-off-by: John L. Hammond <john.hammond@intel.com> Reviewed-on: http://review.whamcloud.com/6150 Intel-bug-id: https://jira.hpdd.intel.com/browse/LU-3221 Reviewed-by: Andreas Dilger <andreas.dilger@intel.com> Reviewed-by: Li Wei <wei.g.li@intel.com> Signed-off-by: Oleg Drokin <green@linuxhacker.ru> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
3d51b95626
commit
0a33252e06
|
@ -293,18 +293,10 @@ int lov_getstripe(struct lov_object *obj, struct lov_stripe_md *lsm,
|
||||||
size_t lmmk_size;
|
size_t lmmk_size;
|
||||||
size_t lum_size;
|
size_t lum_size;
|
||||||
int rc;
|
int rc;
|
||||||
mm_segment_t seg;
|
|
||||||
|
|
||||||
if (!lsm)
|
if (!lsm)
|
||||||
return -ENODATA;
|
return -ENODATA;
|
||||||
|
|
||||||
/*
|
|
||||||
* "Switch to kernel segment" to allow copying from kernel space by
|
|
||||||
* copy_{to,from}_user().
|
|
||||||
*/
|
|
||||||
seg = get_fs();
|
|
||||||
set_fs(KERNEL_DS);
|
|
||||||
|
|
||||||
if (lsm->lsm_magic != LOV_MAGIC_V1 && lsm->lsm_magic != LOV_MAGIC_V3) {
|
if (lsm->lsm_magic != LOV_MAGIC_V1 && lsm->lsm_magic != LOV_MAGIC_V3) {
|
||||||
CERROR("bad LSM MAGIC: 0x%08X != 0x%08X nor 0x%08X\n",
|
CERROR("bad LSM MAGIC: 0x%08X != 0x%08X nor 0x%08X\n",
|
||||||
lsm->lsm_magic, LOV_MAGIC_V1, LOV_MAGIC_V3);
|
lsm->lsm_magic, LOV_MAGIC_V1, LOV_MAGIC_V3);
|
||||||
|
@ -406,6 +398,5 @@ int lov_getstripe(struct lov_object *obj, struct lov_stripe_md *lsm,
|
||||||
out_free:
|
out_free:
|
||||||
kvfree(lmmk);
|
kvfree(lmmk);
|
||||||
out:
|
out:
|
||||||
set_fs(seg);
|
|
||||||
return rc;
|
return rc;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue