Lubancat2/kernel
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
543d8854c4bf2f77b1ede6a0c319a5b5c4fd8c4e
kernel/mm
History
Miaohe Lin 21e23e4c02 mm, slub: fix mismatch between reconstructed freelist depth and cnt 
commit 899447f669da76cc3605665e1a95ee877bc464cc upstream.

If object's reuse is delayed, it will be excluded from the reconstructed
freelist.  But we forgot to adjust the cnt accordingly.  So there will
be a mismatch between reconstructed freelist depth and cnt.  This will
lead to free_debug_processing() complaining about freelist count or a
incorrect slub inuse count.

Link: https://lkml.kernel.org/r/20210916123920.48704-3-linmiaohe@huawei.com
Fixes: c3895391df ("kasan, slub: fix handling of kasan_slab_free hook")
Signed-off-by: Miaohe Lin <linmiaohe@huawei.com>
Reviewed-by: Vlastimil Babka <vbabka@suse.cz>
Cc: Andrey Konovalov <andreyknvl@gmail.com>
Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com>
Cc: Bharata B Rao <bharata@linux.ibm.com>
Cc: Christoph Lameter <cl@linux.com>
Cc: David Rientjes <rientjes@google.com>
Cc: Faiyaz Mohammed <faiyazm@codeaurora.org>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Joonsoo Kim <iamjoonsoo.kim@lge.com>
Cc: Kees Cook <keescook@chromium.org>
Cc: Pekka Enberg <penberg@kernel.org>
Cc: Roman Gushchin <guro@fb.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-10-27 09:53:14 +02:00
..
kasan
…
backing-dev.c
bdi: add a ->dev_name field to struct backing_dev_info
2021-08-08 08:54:29 +02:00
balloon_compaction.c
…
bootmem.c
…
cleancache.c
…
cma_debug.c
…
cma.c
…
cma.h
…
compaction.c
…
debug_page_ref.c
…
debug.c
…
dmapool.c
…
early_ioremap.c
…
fadvise.c
…
failslab.c
…
filemap.c
…
frame_vector.c
…
frontswap.c
…
gup_benchmark.c
…
gup.c
gup: document and work around "COW can break either way" issue
2021-04-28 13:16:51 +02:00
highmem.c
…
hmm.c
…
huge_memory.c
mm/huge_memory.c: don't discard hugepage if other processes are mapping it
2021-07-20 16:15:58 +02:00
hugetlb_cgroup.c
…
hugetlb.c
mm, futex: fix shared futex pgoff on shmem huge page
2021-07-11 12:49:30 +02:00
hwpoison-inject.c
…
init-mm.c
…
internal.h
mm/thp: fix vma_address() if virtual address below file offset
2021-07-11 12:49:28 +02:00
interval_tree.c
…
Kconfig
…
Kconfig.debug
…
khugepaged.c
khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
2021-05-22 10:59:44 +02:00
kmemleak-test.c
…
kmemleak.c
…
ksm.c
ksm: fix potential missing rmap_item for stable_node
2021-05-22 10:59:44 +02:00
list_lru.c
…
maccess.c
…
madvise.c
…
Makefile
…
memblock.c
…
memcontrol.c
…
memfd.c
…
memory_hotplug.c
mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
2021-09-22 11:48:12 +02:00
memory-failure.c
mm/memory-failure: make sure wait for page writeback in memory_failure
2021-06-30 08:48:14 -04:00
memory.c
mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
2021-07-11 12:49:28 +02:00
mempolicy.c
…
mempool.c
…
memtest.c
…
migrate.c
…
mincore.c
…
mlock.c
…
mm_init.c
…
mmap.c
…
mmu_context.c
…
mmu_notifier.c
…
mmzone.c
…
mprotect.c
…
mremap.c
…
msync.c
…
nobootmem.c
…
nommu.c
…
oom_kill.c
…
page_alloc.c
mm/page_alloc: speed up the iteration of max_order
2021-09-22 11:47:48 +02:00
page_counter.c
…
page_ext.c
…
page_idle.c
…
page_io.c
swap: fix swapfile read/write offset
2021-03-07 12:19:02 +01:00
page_isolation.c
…
page_owner.c
…
page_poison.c
…
page_vma_mapped.c
mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
2021-07-11 12:49:30 +02:00
page-writeback.c
…
pagewalk.c
…
percpu-internal.h
…
percpu-km.c
…
percpu-stats.c
…
percpu-vm.c
…
percpu.c
…
pgtable-generic.c
mm/thp: fix __split_huge_pmd_locked() on shmem migration entry
2021-07-11 12:49:27 +02:00
process_vm_access.c
…
quicklist.c
…
readahead.c
…
rmap.c
mm/thp: fix page_address_in_vma() on file THP tails
2021-07-11 12:49:28 +02:00
rodata_test.c
…
shmem.c
userfaultfd: release page in error path to avoid BUG_ON
2021-05-22 10:59:45 +02:00
slab_common.c
mm: slab: fix kmem_cache_create failed when sysfs node not destroyed
2021-07-28 11:13:44 +02:00
slab.c
…
slab.h
…
slob.c
…
slub.c
mm, slub: fix mismatch between reconstructed freelist depth and cnt
2021-10-27 09:53:14 +02:00
sparse-vmemmap.c
…
sparse.c
mm/sparse: add the missing sparse_buffer_fini() in error branch
2021-05-22 10:59:38 +02:00
swap_cgroup.c
…
swap_slots.c
…
swap_state.c
…
swap.c
…
swapfile.c
swap: fix swapfile read/write offset
2021-03-07 12:19:02 +01:00
truncate.c
mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
2021-07-11 12:49:28 +02:00
usercopy.c
…
userfaultfd.c
hugetlbfs: hugetlb_fault_mutex_hash() cleanup
2021-06-03 08:38:12 +02:00
util.c
…
vmacache.c
…
vmalloc.c
…
vmpressure.c
…
vmscan.c
…
vmstat.c
mm, vmstat: drop zone->lock in /proc/pagetypeinfo
2021-06-03 08:38:02 +02:00
workingset.c
…
z3fold.c
…
zbud.c
…
zpool.c
…
zsmalloc.c
zsmalloc: account the number of compacted pages correctly
2021-03-07 12:19:01 +01:00
zswap.c
…