parisc: fix kernel crash when unwinding a userspace process

Any user on existing parisc 32- and 64bit-kernels can easily crash
the kernel and as such enforce a DSO.
A simple testcase is available here:
http://gsyprf10.external.hp.com/~deller/crash.tgz

The problem is introduced by the fact, that the handle_interruption()
crash handler calls the show_regs() function, which in turn tries to
unwind the stack by calling parisc_show_stack(). Since the stack contains
userspace addresses, a try to unwind the stack is dangerous and useless
and leads to the crash.

The fix is trivial: For userspace processes
a) avoid to unwind the stack, and
b) avoid to resolve userspace addresses to kernel symbol names.

While touching this code, I converted print_symbol() to %pS
printk formats and made parisc_show_stack() static.

An initial patch for this was written by Kyle McMartin back in August:
http://marc.info/?l=linux-parisc&m=121805168830283&w=2

Compile and run-tested with a 64bit parisc kernel.

Signed-off-by: Helge Deller <deller@gmx.de>
Cc: Grant Grundler <grundler@parisc-linux.org>
Cc: Matthew Wilcox <matthew@wil.cx>
Cc: <stable@kernel.org> [2.6.25.x, 2.6.26.x, 2.6.27.x, earlier...]
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Kyle McMartin <kyle@mcmartin.ca>

authored by Helge Deller and committed by Kyle McMartin 7a3f5134 9860d1b0

+20 -21
+20 -21
arch/parisc/kernel/traps.c
··· 24 24 #include <linux/init.h> 25 25 #include <linux/interrupt.h> 26 26 #include <linux/console.h> 27 - #include <linux/kallsyms.h> 28 27 #include <linux/bug.h> 29 28 30 29 #include <asm/assembly.h> ··· 50 51 DEFINE_SPINLOCK(pa_dbit_lock); 51 52 #endif 52 53 53 - void parisc_show_stack(struct task_struct *t, unsigned long *sp, 54 + static void parisc_show_stack(struct task_struct *task, unsigned long *sp, 54 55 struct pt_regs *regs); 55 56 56 57 static int printbinary(char *buf, unsigned long x, int nbits) ··· 120 121 121 122 void show_regs(struct pt_regs *regs) 122 123 { 123 - int i; 124 + int i, user; 124 125 char *level; 125 126 unsigned long cr30, cr31; 126 127 127 - level = user_mode(regs) ? KERN_DEBUG : KERN_CRIT; 128 + user = user_mode(regs); 129 + level = user ? KERN_DEBUG : KERN_CRIT; 128 130 129 131 print_gr(level, regs); 130 132 131 133 for (i = 0; i < 8; i += 4) 132 134 PRINTREGS(level, regs->sr, "sr", RFMT, i); 133 135 134 - if (user_mode(regs)) 136 + if (user) 135 137 print_fr(level, regs); 136 138 137 139 cr30 = mfctl(30); ··· 145 145 printk("%s CPU: %8d CR30: " RFMT " CR31: " RFMT "\n", 146 146 level, current_thread_info()->cpu, cr30, cr31); 147 147 printk("%s ORIG_R28: " RFMT "\n", level, regs->orig_r28); 148 - printk(level); 149 - print_symbol(" IAOQ[0]: %s\n", regs->iaoq[0]); 150 - printk(level); 151 - print_symbol(" IAOQ[1]: %s\n", regs->iaoq[1]); 152 - printk(level); 153 - print_symbol(" RP(r2): %s\n", regs->gr[2]); 154 148 155 - parisc_show_stack(current, NULL, regs); 149 + if (user) { 150 + printk("%s IAOQ[0]: " RFMT "\n", level, regs->iaoq[0]); 151 + printk("%s IAOQ[1]: " RFMT "\n", level, regs->iaoq[1]); 152 + printk("%s RP(r2): " RFMT "\n", level, regs->gr[2]); 153 + } else { 154 + printk("%s IAOQ[0]: %pS\n", level, (void *) regs->iaoq[0]); 155 + printk("%s IAOQ[1]: %pS\n", level, (void *) regs->iaoq[1]); 156 + printk("%s RP(r2): %pS\n", level, (void *) regs->gr[2]); 157 + 158 + parisc_show_stack(current, NULL, regs); 159 + } 156 160 } 157 161 158 162 ··· 177 173 break; 178 174 179 175 if (__kernel_text_address(info->ip)) { 180 - printk("%s [<" RFMT ">] ", (i&0x3)==1 ? KERN_CRIT : "", info->ip); 181 - #ifdef CONFIG_KALLSYMS 182 - print_symbol("%s\n", info->ip); 183 - #else 184 - if ((i & 0x03) == 0) 185 - printk("\n"); 186 - #endif 176 + printk(KERN_CRIT " [<" RFMT ">] %pS\n", 177 + info->ip, (void *) info->ip); 187 178 i++; 188 179 } 189 180 } 190 - printk("\n"); 181 + printk(KERN_CRIT "\n"); 191 182 } 192 183 193 - void parisc_show_stack(struct task_struct *task, unsigned long *sp, 184 + static void parisc_show_stack(struct task_struct *task, unsigned long *sp, 194 185 struct pt_regs *regs) 195 186 { 196 187 struct unwind_frame_info info;