From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pg0-f72.google.com (mail-pg0-f72.google.com [74.125.83.72]) by kanga.kvack.org (Postfix) with ESMTP id 263246B053B for ; Tue, 11 Jul 2017 13:27:48 -0400 (EDT) Received: by mail-pg0-f72.google.com with SMTP id 125so6186567pgi.2 for ; Tue, 11 Jul 2017 10:27:48 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10111.outbound.protection.outlook.com. [40.107.1.111]) by mx.google.com with ESMTPS id g5si350065pgf.563.2017.07.11.10.27.46 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 11 Jul 2017 10:27:47 -0700 (PDT) Subject: Re: KASAN vs. boot-time switching between 4- and 5-level paging References: <20170710141713.7aox3edx6o7lrrie@node.shutemov.name> <03A6D7ED-300C-4431-9EB5-67C7A3EA4A2E@amacapital.net> <20170710184704.realchrhzpblqqlk@node.shutemov.name> <20170710212403.7ycczkhhki3vrgac@node.shutemov.name> <20170711103548.mkv5w7dd5gpdenne@node.shutemov.name> <20170711170332.wlaudicepkg35dmm@node.shutemov.name> From: Andrey Ryabinin Message-ID: Date: Tue, 11 Jul 2017 20:29:59 +0300 MIME-Version: 1.0 In-Reply-To: <20170711170332.wlaudicepkg35dmm@node.shutemov.name> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Sender: owner-linux-mm@kvack.org List-ID: To: "Kirill A. Shutemov" Cc: Andy Lutomirski , Dmitry Vyukov , Alexander Potapenko , "Kirill A. Shutemov" , Linus Torvalds , Andrew Morton , "x86@kernel.org" , Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , Andi Kleen , Dave Hansen , linux-arch , "linux-mm@kvack.org" , LKML , kasan-dev On 07/11/2017 08:03 PM, Kirill A. Shutemov wrote: > On Tue, Jul 11, 2017 at 07:45:48PM +0300, Andrey Ryabinin wrote: >> On 07/11/2017 06:15 PM, Andrey Ryabinin wrote: >>> >>> I reproduced this, and this is kasan bug: >>> >>> a??0xffffffff84864897 mov $0xffffffff83f1d0b8,%rdi >>> a??0xffffffff8486489e movabs $0xdffffc0000000000,%rax >>> a??0xffffffff848648a8 push %rbp >>> a??0xffffffff848648a9 mov %rdi,%rdx >>> a??0xffffffff848648ac shr $0x3,%rdx >>> a??0xffffffff848648b0 mov %rsp,%rbp >>> >a??0xffffffff848648b3 mov (%rdx,%rax,1),%al >>> >>> we crash on the last move which is a read from shadow >> >> >> Ughh, I forgot about phys_base. > > Thanks! Works for me. > > Can use your Signed-off-by for a [cleaned up version of your] patch? Sure. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org