Date: Sat, 20 Mar 2010 15:19:57 +0000 (UTC) From: Nathan Whitehorn <nwhitehorn@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/powerpc/aim mmu_oea64.c src/sys/powerpc/include pte.h Message-ID: <201003201520.o2KFKHu7027027@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
nwhitehorn 2010-03-20 15:19:57 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_8)
sys/powerpc/aim mmu_oea64.c
sys/powerpc/include pte.h
Log:
SVN rev 205379 on 2010-03-20 15:19:57Z by nwhitehorn
MFC r204268:
Close a race involving the OEA64 scratchpage. When the scratch page's
physical address is changed, there is a brief window during which its PTE
is invalid. Since moea64_set_scratchpage_pa() does not and cannot hold
the page table lock, it was possible for another CPU to insert a new PTE
into the scratch page's PTEG slot during this interval, corrupting both
mappings.
Solve this by creating a new flag, LPTE_LOCKED, such that
moea64_pte_insert will avoid claiming locked PTEG slots even if they
are invalid. This change also incorporates some additional paranoia
added to solve things I thought might be this bug.
Reported by: linimon
Revision Changes Path
1.4.2.9 +14 -10 src/sys/powerpc/aim/mmu_oea64.c
1.9.2.2 +1 -0 src/sys/powerpc/include/pte.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201003201520.o2KFKHu7027027>