Chen Lifu c08b4848f5 riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit ... Since commit 5d8544e2d0 ("RISC-V: Generic library routines and assembly") and commit ebcbd75e39 ("riscv: Fix the bug in memory access fixup code"), if __clear_user and __copy_user return from an fixup branch, CSR_STATUS SR_SUM bit will be set, it is a vulnerability, so that S-mode memory accesses to pages that are accessible by U-mode will success. Disable S-mode access to U-mode memory should clear SR_SUM bit. Fixes: 5d8544e2d0 ("RISC-V: Generic library routines and assembly") Fixes: ebcbd75e39 ("riscv: Fix the bug in memory access fixup code") Signed-off-by: Chen Lifu <chenlifu@huawei.com> Reviewed-by: Ben Dooks <ben.dooks@codethink.co.uk> Link: https://lore.kernel.org/r/20220615014714.1650349-1-chenlifu@huawei.com Cc: stable@vger.kernel.org Signed-off-by: Palmer Dabbelt <palmer@rivosinc.com>		2022-08-10 14:06:31 -07:00
..
Makefile	…
delay.c	…
error-inject.c	…
memcpy.S	…
memmove.S	riscv: Fixed misaligned memory access. Fixed pointer comparison.	2022-03-10 10:24:04 -08:00
memset.S	…
tishift.S	…
uaccess.S	riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit	2022-08-10 14:06:31 -07:00