All of lore.kernel.org
 help / color / mirror / Atom feed
* [folded-merged] kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch removed from -mm tree
@ 2020-12-11 21:21 akpm
  0 siblings, 0 replies; only message in thread
From: akpm @ 2020-12-11 21:21 UTC (permalink / raw)
  To: aryabinin, dvyukov, glider, guangye.yang, Kuan-Ying.Lee,
	matthias.bgg, miles.chen, mm-commits, nicholas.tang, qcai,
	qiang.zhang, sfr


The patch titled
     Subject: kasan: fix slab double free when cpu-hotplug
has been removed from the -mm tree.  Its filename was
     kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch

This patch was dropped because it was folded into kasan-fix-object-remain-in-offline-per-cpu-quarantine.patch

------------------------------------------------------
From: Zqiang <qiang.zhang@windriver.com>
Subject: kasan: fix slab double free when cpu-hotplug

When a CPU offline, the per-cpu quarantine's offline be set true, after
this, if the quarantine_put be called in this CPU, the objects will be
free and return false, free objects doesn't to be done, due to return
false, the slab memory manager will free this objects.

Link: https://lkml.kernel.org/r/20201204102206.20237-1-qiang.zhang@windriver.com
Fixes: 41ab1aae781f ("kasan: fix object remaining in offline per-cpu quarantine")
Signed-off-by: Zqiang <qiang.zhang@windriver.com>
Cc: Kuan-Ying Lee <Kuan-Ying.Lee@mediatek.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Guangye Yang <guangye.yang@mediatek.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Alexander Potapenko <glider@google.com>
Cc: Matthias Brugger <matthias.bgg@gmail.com>
Cc: Nicholas Tang <nicholas.tang@mediatek.com>
Cc: Miles Chen <miles.chen@mediatek.com>
Cc: Qian Cai <qcai@redhat.com>
Cc: Stephen Rothwell <sfr@canb.auug.org.au>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
---

 mm/kasan/quarantine.c |    1 -
 1 file changed, 1 deletion(-)

--- a/mm/kasan/quarantine.c~kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix
+++ a/mm/kasan/quarantine.c
@@ -191,7 +191,6 @@ void quarantine_put(struct kasan_free_me
 
 	q = this_cpu_ptr(&cpu_quarantine);
 	if (q->offline) {
-		qlink_free(&info->quarantine_link, cache);
 		local_irq_restore(flags);
 		return;
 	}
_

Patches currently in -mm which might be from qiang.zhang@windriver.com are

kasan-fix-object-remain-in-offline-per-cpu-quarantine.patch


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2020-12-11 22:31 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-12-11 21:21 [folded-merged] kasan-fix-object-remaining-in-offline-per-cpu-quarantine-fix.patch removed from -mm tree akpm

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.