aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Beulich <jbeulich@suse.com>2013-08-20 15:01:10 +0200
committerJan Beulich <jbeulich@suse.com>2013-08-20 15:01:10 +0200
commitd1e92ff4f98181eca51e39e9370b18c47f0607b6 (patch)
tree0fde2d34f52602fbff4f39ac38281358d6d02090
parentc2c3d78cb84f1b47757cb3f5c1495ba662fae3a3 (diff)
downloadxen-d1e92ff4f98181eca51e39e9370b18c47f0607b6.tar.gz
xen-d1e92ff4f98181eca51e39e9370b18c47f0607b6.tar.bz2
xen-d1e92ff4f98181eca51e39e9370b18c47f0607b6.zip
x86/MTRR: fix range check in mtrr_add_page()
Extracted from Yinghai Lu's Linux commit d5c78673 ("x86: Fix /proc/mtrr with base/size more than 44bits"). Signed-off-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com> Acked-by: Keir Fraser <keir@xen.org> master commit: f67af6d5803b6a015e30cb490a94f9547cb0437c master date: 2013-08-14 11:20:26 +0200
-rw-r--r--xen/arch/x86/cpu/mtrr/main.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/xen/arch/x86/cpu/mtrr/main.c b/xen/arch/x86/cpu/mtrr/main.c
index a201d72b6d..f7fc0a6e4b 100644
--- a/xen/arch/x86/cpu/mtrr/main.c
+++ b/xen/arch/x86/cpu/mtrr/main.c
@@ -340,7 +340,7 @@ int mtrr_add_page(unsigned long base, unsigned long size,
return -EINVAL;
}
- if (base & size_or_mask || size & size_or_mask) {
+ if ((base | (base + size - 1)) >> (paddr_bits - PAGE_SHIFT)) {
printk(KERN_WARNING "mtrr: base or size exceeds the MTRR width\n");
return -EINVAL;
}