Junrui Luo 47b87f469a powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() ... spufs_mem_mmap_access() computes the local store offset as address - vma->vm_start, but bounds-checks it against vma->vm_end instead of the local store size. On 64-bit, offset is always well below vma->vm_end, so the clamp never fires and len stays unbounded against the LS_SIZE buffer returned by ctx->ops->get_ls(). Reject offsets at or beyond LS_SIZE and clamp len to the remaining space, mirroring the guard already used by spufs_mem_mmap_fault() and spufs_ps_fault(). Fixes: a352894d07 ("spufs: use new vm_ops->access to allow local state access from gdb") Reported-by: Yuhao Jiang <danisjiang@gmail.com> Cc: stable@vger.kernel.org Signed-off-by: Junrui Luo <moonafterrain@outlook.com> Signed-off-by: Madhavan Srinivasan <maddy@linux.ibm.com> Link: https://patch.msgid.link/SYBPR01MB7881EE775E8B51C09F5A29E7AF152@SYBPR01MB7881.ausprd01.prod.outlook.com		2026-07-13 15:10:04 +05:30
..
spufs	powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()	2026-07-13 15:10:04 +05:30
Kconfig	powerpc/cell: Remove CBE_CPUFREQ_SPU_GOVERNOR	2025-02-26 21:15:07 +05:30
Makefile	powerpc/cell: Remove CBE_CPUFREQ_SPU_GOVERNOR	2025-02-26 21:15:07 +05:30
spu_base.c	powerpc: use sysfs_emit{_at} in sysfs show functions	2026-06-02 11:24:32 +05:30
spu_callbacks.c	powerpc: Use common syscall handler type	2022-09-28 19:22:09 +10:00
spu_syscalls.c	convert spu_run(2)	2024-11-03 01:28:07 -05:00