mirror of
https://github.com/apache/nuttx.git
synced 2026-05-21 21:34:07 +08:00
arm64_addrenv_pgmap.c: Revoke user execution access to kernel mmap'd pages
Otherwise, user can run code from there
This commit is contained in:
@@ -271,6 +271,10 @@ int up_addrenv_kmap_pages(void **pages, unsigned int npages, uintptr_t vaddr,
|
||||
|
||||
mask &= ~PTE_BLOCK_DESC_NG;
|
||||
|
||||
/* Also, revoke user execute access */
|
||||
|
||||
mask |= PTE_BLOCK_DESC_UXN;
|
||||
|
||||
/* Let arm64_map_pages do the work */
|
||||
|
||||
return arm64_map_pages(addrenv, (uintptr_t *)pages, npages, vaddr, mask);
|
||||
|
||||
Reference in New Issue
Block a user