1
0
Fork 0
forked from nuttx/nuttx-update

arm64_addrenv_pgmap.c: Revoke user execution access to kernel mmap'd pages

Otherwise, user can run code from there
This commit is contained in:
Ville Juven 2024-09-04 12:27:45 +03:00 committed by Xiang Xiao
parent eebff25d69
commit 0ca1a07e84

View file

@ -271,6 +271,10 @@ int up_addrenv_kmap_pages(void **pages, unsigned int npages, uintptr_t vaddr,
mask &= ~PTE_BLOCK_DESC_NG;
/* Also, revoke user execute access */
mask |= PTE_BLOCK_DESC_UXN;
/* Let arm64_map_pages do the work */
return arm64_map_pages(addrenv, (uintptr_t *)pages, npages, vaddr, mask);