# git rev-parse -q --verify 44960f2a7b63e224b1091b3e1d6f60e0cdf4be0c^{commit}
44960f2a7b63e224b1091b3e1d6f60e0cdf4be0c
already have revision, skipping fetch
# git checkout -q -f -B kisskb 44960f2a7b63e224b1091b3e1d6f60e0cdf4be0c
# git clean -qxdf
# < git log -1
# commit 44960f2a7b63e224b1091b3e1d6f60e0cdf4be0c
# Author: John Stultz <john.stultz@linaro.org>
# Date:   Tue Jul 31 10:17:04 2018 -0700
# 
#     staging: ashmem: Fix SIGBUS crash when traversing mmaped ashmem pages
#     
#     Amit Pundir and Youling in parallel reported crashes with recent
#     mainline kernels running Android:
#     
#       F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
#       F DEBUG   : Build fingerprint: 'Android/db410c32_only/db410c32_only:Q/OC-MR1/102:userdebug/test-key
#       F DEBUG   : Revision: '0'
#       F DEBUG   : ABI: 'arm'
#       F DEBUG   : pid: 2261, tid: 2261, name: zygote  >>> zygote <<<
#       F DEBUG   : signal 7 (SIGBUS), code 2 (BUS_ADRERR), fault addr 0xec00008
#       ... <snip> ...
#       F DEBUG   : backtrace:
#       F DEBUG   :     #00 pc 00001c04  /system/lib/libc.so (memset+48)
#       F DEBUG   :     #01 pc 0010c513  /system/lib/libart.so (create_mspace_with_base+82)
#       F DEBUG   :     #02 pc 0015c601  /system/lib/libart.so (art::gc::space::DlMallocSpace::CreateMspace(void*, unsigned int, unsigned int)+40)
#       F DEBUG   :     #03 pc 0015c3ed  /system/lib/libart.so (art::gc::space::DlMallocSpace::CreateFromMemMap(art::MemMap*, std::__1::basic_string<char, std::__ 1::char_traits<char>, std::__1::allocator<char>> const&, unsigned int, unsigned int, unsigned int, unsigned int, bool)+36)
#       ...
#     
#     This was bisected back to commit bfd40eaff5ab ("mm: fix
#     vma_is_anonymous() false-positives").
#     
#     create_mspace_with_base() in the trace above, utilizes ashmem, and with
#     ashmem, for shared mappings we use shmem_zero_setup(), which sets the
#     vma->vm_ops to &shmem_vm_ops.  But for private ashmem mappings nothing
#     sets the vma->vm_ops.
#     
#     Looking at the problematic patch, it seems to add a requirement that one
#     call vma_set_anonymous() on a vma, otherwise the dummy_vm_ops will be
#     used.  Using the dummy_vm_ops seem to triggger SIGBUS when traversing
#     unmapped pages.
#     
#     Thus, this patch adds a call to vma_set_anonymous() for ashmem private
#     mappings and seems to avoid the reported problem.
#     
#     Fixes: bfd40eaff5ab ("mm: fix vma_is_anonymous() false-positives")
#     Cc: Kirill Shutemov <kirill.shutemov@linux.intel.com>
#     Cc: Andrew Morton <akpm@linux-foundation.org>
#     Cc: Dmitry Vyukov <dvyukov@google.com>
#     Cc: Oleg Nesterov <oleg@redhat.com>
#     Cc: Andrea Arcangeli <aarcange@redhat.com>
#     Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
#     Cc: Hugh Dickins <hughd@google.com>
#     Cc: Joel Fernandes <joelaf@google.com>
#     Cc: Colin Cross <ccross@google.com>
#     Cc: Matthew Wilcox <willy@infradead.org>
#     Reported-by: Amit Pundir <amit.pundir@linaro.org>
#     Reported-by: Youling 257 <youling257@gmail.com>
#     Signed-off-by: John Stultz <john.stultz@linaro.org>
#     Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
# < /opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux-gcc --version
# < git log --format=%s --max-count=1 44960f2a7b63e224b1091b3e1d6f60e0cdf4be0c
# < make -s -j 48 ARCH=parisc O=/kisskb/build/linus_parisc-allnoconfig_parisc CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux-  allnoconfig
# make -s -j 48 ARCH=parisc O=/kisskb/build/linus_parisc-allnoconfig_parisc CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-8.1.0-nolibc/hppa-linux/bin/hppa-linux-  
<stdin>:1335:2: warning: #warning syscall rseq not implemented [-Wcpp]
/kisskb/src/arch/parisc/kernel/pci-dma.c:335:12: warning: 'proc_pcxl_dma_show' defined but not used [-Wunused-function]
 static int proc_pcxl_dma_show(struct seq_file *m, void *v)
            ^~~~~~~~~~~~~~~~~~
In function 'fill_kobj_path',
    inlined from 'kobject_get_path' at /kisskb/src/lib/kobject.c:155:2:
/kisskb/src/lib/kobject.c:128:3: warning: 'strncpy' output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
   strncpy(path + length, kobject_name(parent), cur);
   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/kisskb/src/lib/kobject.c: In function 'kobject_get_path':
/kisskb/src/lib/kobject.c:125:13: note: length computed here
   int cur = strlen(kobject_name(parent));
             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
Completed OK
# rm -rf /kisskb/build/linus_parisc-allnoconfig_parisc
# Build took: 0:00:14.461626