1. 03 4月, 2017 1 次提交
  2. 10 3月, 2017 1 次提交
  3. 08 3月, 2017 1 次提交
    • M
      ida: Free correct IDA bitmap · 4ecd9542
      Matthew Wilcox 提交于
      There's a relatively rare race where we look at the per-cpu preallocated
      IDA bitmap, see it's NULL, allocate a new one, and atomically update it.
      If the kmalloc() happened to sleep and we were rescheduled to a different
      CPU, or an interrupt came in at the exact right time, another task
      might have successfully allocated a bitmap and already deposited it.
      I forgot what the semantics of cmpxchg() were and ended up freeing the
      wrong bitmap leading to KASAN reporting a use-after-free.
      
      Dmitry found the bug with syzkaller & wrote the patch.  I wrote the test
      case that will reproduce the bug without his patch being applied.
      Reported-by: NDmitry Vyukov <dvyukov@google.com>
      Signed-off-by: NMatthew Wilcox <mawilcox@microsoft.com>
      4ecd9542
  4. 02 3月, 2017 13 次提交
  5. 01 3月, 2017 1 次提交
  6. 28 2月, 2017 4 次提交
  7. 27 2月, 2017 4 次提交
  8. 25 2月, 2017 12 次提交
  9. 24 2月, 2017 2 次提交
  10. 23 2月, 2017 1 次提交