* [folded-merged] kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch removed from -mm tree
@ 2020-12-11 21:21 akpm
0 siblings, 0 replies; only message in thread
From: akpm @ 2020-12-11 21:21 UTC (permalink / raw)
To: aryabinin, dvyukov, glider, guangye.yang, Kuan-Ying.Lee,
matthias.bgg, miles.chen, mm-commits, nicholas.tang, qcai,
qiang.zhang, sfr
The patch titled
Subject: kasan: fix slab double free when cpu-hotplug
has been removed from the -mm tree. Its filename was
kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch
This patch was dropped because it was folded into kasan-fix-object-remain-in-offline-per-cpu-quarantine.patch
------------------------------------------------------
From: Zqiang <qiang.zhang@windriver.com>
Subject: kasan: fix slab double free when cpu-hotplug
When a CPU offline, the per-cpu quarantine's offline be set true, after
this, if the quarantine_put be called in this CPU, the objects will be
free and return false, free objects doesn't to be done, due to return
false, the slab memory manager will free this objects.
Link: https://lkml.kernel.org/r/20201204102206.20237-1-qiang.zhang@windriver.com
Fixes: 41ab1aae781f ("kasan: fix object remaining in offline per-cpu quarantine")
Signed-off-by: Zqiang <qiang.zhang@windriver.com>
Cc: Kuan-Ying Lee <Kuan-Ying.Lee@mediatek.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Guangye Yang <guangye.yang@mediatek.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Alexander Potapenko <glider@google.com>
Cc: Matthias Brugger <matthias.bgg@gmail.com>
Cc: Nicholas Tang <nicholas.tang@mediatek.com>
Cc: Miles Chen <miles.chen@mediatek.com>
Cc: Qian Cai <qcai@redhat.com>
Cc: Stephen Rothwell <sfr@canb.auug.org.au>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
---
mm/kasan/quarantine.c | 1 -
1 file changed, 1 deletion(-)
--- a/mm/kasan/quarantine.c~kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix
+++ a/mm/kasan/quarantine.c
@@ -191,7 +191,6 @@ void quarantine_put(struct kasan_free_me
q = this_cpu_ptr(&cpu_quarantine);
if (q->offline) {
- qlink_free(&info->quarantine_link, cache);
local_irq_restore(flags);
return;
}
_
Patches currently in -mm which might be from qiang.zhang@windriver.com are
kasan-fix-object-remain-in-offline-per-cpu-quarantine.patch
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2020-12-11 22:31 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-12-11 21:21 [folded-merged] kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch removed from -mm tree akpm
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).