mirror of
https://github.com/brain-hackers/linux-brain.git
synced 2024-06-09 15:26:21 +09:00
44d96d2dc0
[ Upstream commit 99e729bd40fb3272fa4b0140839d5e957b58588a ]
Noticed failure as a crash on ia64 when tried to symbolize all backtraces
collected by page_owner=on:
$ cat /sys/kernel/debug/page_owner
<oops>
CPU: 1 PID: 2074 Comm: cat Not tainted 5.12.0-rc4 #226
Hardware name: hp server rx3600, BIOS 04.03 04/08/2008
ip is at dereference_module_function_descriptor+0x41/0x100
Crash happens at dereference_module_function_descriptor() due to
use-after-free when dereferencing ".opd" section header.
All section headers are already freed after module is laoded successfully.
To keep symbolizer working the change stores ".opd" address and size after
module is relocated to a new place and before section headers are
discarded.
To make similar errors less obscure module_finalize() now zeroes out all
variables relevant to module loading only.
Link: https://lkml.kernel.org/r/20210403074803.3309096-1-slyfox@gentoo.org
Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
40 lines
1.3 KiB
C
40 lines
1.3 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _ASM_IA64_MODULE_H
|
|
#define _ASM_IA64_MODULE_H
|
|
|
|
#include <asm-generic/module.h>
|
|
|
|
/*
|
|
* IA-64-specific support for kernel module loader.
|
|
*
|
|
* Copyright (C) 2003 Hewlett-Packard Co
|
|
* David Mosberger-Tang <davidm@hpl.hp.com>
|
|
*/
|
|
|
|
struct elf64_shdr; /* forward declration */
|
|
|
|
struct mod_arch_specific {
|
|
/* Used only at module load time. */
|
|
struct elf64_shdr *core_plt; /* core PLT section */
|
|
struct elf64_shdr *init_plt; /* init PLT section */
|
|
struct elf64_shdr *got; /* global offset table */
|
|
struct elf64_shdr *opd; /* official procedure descriptors */
|
|
struct elf64_shdr *unwind; /* unwind-table section */
|
|
unsigned long gp; /* global-pointer for module */
|
|
unsigned int next_got_entry; /* index of next available got entry */
|
|
|
|
/* Used at module run and cleanup time. */
|
|
void *core_unw_table; /* core unwind-table cookie returned by unwinder */
|
|
void *init_unw_table; /* init unwind-table cookie returned by unwinder */
|
|
void *opd_addr; /* symbolize uses .opd to get to actual function */
|
|
unsigned long opd_size;
|
|
};
|
|
|
|
#define MODULE_PROC_FAMILY "ia64"
|
|
#define MODULE_ARCH_VERMAGIC MODULE_PROC_FAMILY \
|
|
"gcc-" __stringify(__GNUC__) "." __stringify(__GNUC_MINOR__)
|
|
|
|
#define ARCH_SHF_SMALL SHF_IA_64_SHORT
|
|
|
|
#endif /* _ASM_IA64_MODULE_H */
|