diff options
author | Michael S. Tsirkin <mst@redhat.com> | 2016-02-28 10:32:07 -0500 |
---|---|---|
committer | Marc Zyngier <marc.zyngier@arm.com> | 2016-02-29 04:56:40 -0500 |
commit | 4cad67fca3fc952d6f2ed9e799621f07666a560f (patch) | |
tree | eb24441cbebf6d8523ddd9ea1323ab052a431614 | |
parent | fd451b90e78c4178bcfc5072f2b2b637500c109a (diff) |
arm/arm64: KVM: Fix ioctl error handling
Calling return copy_to_user(...) in an ioctl will not
do the right thing if there's a pagefault:
copy_to_user returns the number of bytes not copied
in this case.
Fix up kvm to do
return copy_to_user(...)) ? -EFAULT : 0;
everywhere.
Cc: stable@vger.kernel.org
Acked-by: Christoffer Dall <christoffer.dall@linaro.org>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
-rw-r--r-- | arch/arm/kvm/guest.c | 2 | ||||
-rw-r--r-- | arch/arm64/kvm/guest.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/arch/arm/kvm/guest.c b/arch/arm/kvm/guest.c index 5fa69d7bae58..99361f11354a 100644 --- a/arch/arm/kvm/guest.c +++ b/arch/arm/kvm/guest.c | |||
@@ -161,7 +161,7 @@ static int get_timer_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg) | |||
161 | u64 val; | 161 | u64 val; |
162 | 162 | ||
163 | val = kvm_arm_timer_get_reg(vcpu, reg->id); | 163 | val = kvm_arm_timer_get_reg(vcpu, reg->id); |
164 | return copy_to_user(uaddr, &val, KVM_REG_SIZE(reg->id)); | 164 | return copy_to_user(uaddr, &val, KVM_REG_SIZE(reg->id)) ? -EFAULT : 0; |
165 | } | 165 | } |
166 | 166 | ||
167 | static unsigned long num_core_regs(void) | 167 | static unsigned long num_core_regs(void) |
diff --git a/arch/arm64/kvm/guest.c b/arch/arm64/kvm/guest.c index fcb778899a38..9e54ad7c240a 100644 --- a/arch/arm64/kvm/guest.c +++ b/arch/arm64/kvm/guest.c | |||
@@ -194,7 +194,7 @@ static int get_timer_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg) | |||
194 | u64 val; | 194 | u64 val; |
195 | 195 | ||
196 | val = kvm_arm_timer_get_reg(vcpu, reg->id); | 196 | val = kvm_arm_timer_get_reg(vcpu, reg->id); |
197 | return copy_to_user(uaddr, &val, KVM_REG_SIZE(reg->id)); | 197 | return copy_to_user(uaddr, &val, KVM_REG_SIZE(reg->id)) ? -EFAULT : 0; |
198 | } | 198 | } |
199 | 199 | ||
200 | /** | 200 | /** |