Hugh Dickins d05f0cdcbe mm: fix crashes from mbind() merging vmas ... In v2.6.34 commit 9d8cebd4bc ("mm: fix mbind vma merge problem") introduced vma merging to mbind(), but it should have also changed the convention of passing start vma from queue_pages_range() (formerly check_range()) to new_vma_page(): vma merging may have already freed that structure, resulting in BUG at mm/mempolicy.c:1738 and probably worse crashes. Fixes: 9d8cebd4bc ("mm: fix mbind vma merge problem") Reported-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Tested-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Signed-off-by: Hugh Dickins <hughd@google.com> Acked-by: Christoph Lameter <cl@linux.com> Cc: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com> Cc: Minchan Kim <minchan.kim@gmail.com> Cc: <stable@vger.kernel.org> [2.6.34+] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2014-06-23 16:47:44 -07:00
..
Kconfig	mm/zsmalloc: make zsmalloc module-buildable	2014-06-04 16:54:14 -07:00
Kconfig.debug	…
Makefile	mm: move get_user_pages()-related code to separate file	2014-06-04 16:54:04 -07:00
backing-dev.c	…
balloon_compaction.c	…
bootmem.c	…
cleancache.c	…
compaction.c	mm, compaction: properly signal and act upon lock and need_sched() contention	2014-06-04 16:54:11 -07:00
debug-pagealloc.c	…
dmapool.c	mm/dmapool.c: reuse devres_release() to free resources	2014-06-04 16:54:08 -07:00
early_ioremap.c	…
fadvise.c	…
failslab.c	…
filemap.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-06-12 10:30:18 -07:00
filemap_xip.c	…
fremap.c	mm: mark remap_file_pages() syscall as deprecated	2014-06-06 16:08:17 -07:00
frontswap.c	swap: change swap_list_head to plist, add swap_avail_head	2014-06-04 16:54:07 -07:00
gup.c	mm: cleanup __get_user_pages()	2014-06-04 16:54:05 -07:00
highmem.c	…
huge_memory.c	mm: let mm_find_pmd fix buggy race with THP fault	2014-06-23 16:47:44 -07:00
hugetlb.c	hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned entry	2014-06-23 16:47:43 -07:00
hugetlb_cgroup.c	…
hwpoison-inject.c	…
init-mm.c	…
internal.h	mm, compaction: properly signal and act upon lock and need_sched() contention	2014-06-04 16:54:11 -07:00
interval_tree.c	…
iov_iter.c	…
kmemcheck.c	…
kmemleak-test.c	mm/kmemleak-test.c: use pr_fmt for logging	2014-06-06 16:08:18 -07:00
kmemleak.c	mm: introduce kmemleak_update_trace()	2014-06-06 16:08:17 -07:00
ksm.c	mm: let mm_find_pmd fix buggy race with THP fault	2014-06-23 16:47:44 -07:00
list_lru.c	…
maccess.c	…
madvise.c	…
memblock.c	mm/memblock.c: call kmemleak directly from memblock_(alloc|free)	2014-06-06 16:08:17 -07:00
memcontrol.c	Merge branch 'for-3.16' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2014-06-09 15:03:33 -07:00
memory-failure.c	mm/memory-failure.c: support use of a dedicated thread to handle SIGBUS(BUS_MCEERR_AO)	2014-06-04 16:54:13 -07:00
memory.c	mm: document do_fault_around() feature	2014-06-04 16:54:12 -07:00
memory_hotplug.c	mm, migration: add destination page freeing callback	2014-06-04 16:54:06 -07:00
mempolicy.c	mm: fix crashes from mbind() merging vmas	2014-06-23 16:47:44 -07:00
mempool.c	mm/mempool.c: update the kmemleak stack trace for mempool allocations	2014-06-06 16:08:17 -07:00
migrate.c	mm: let mm_find_pmd fix buggy race with THP fault	2014-06-23 16:47:44 -07:00
mincore.c	…
mlock.c	…
mm_init.c	…
mmap.c	mm: convert some level-less printks to pr_*	2014-06-06 16:08:18 -07:00
mmu_context.c	…
mmu_notifier.c	…
mmzone.c	…
mprotect.c	…
mremap.c	…
msync.c	mm/msync.c: sync only the requested range in msync()	2014-06-04 16:54:11 -07:00
nobootmem.c	mm/memblock.c: call kmemleak directly from memblock_(alloc|free)	2014-06-06 16:08:17 -07:00
nommu.c	mm: nommu: per-thread vma cache fix	2014-06-23 16:47:43 -07:00
oom_kill.c	…
page-writeback.c	Clean ups and miscellaneous bug fixes, in particular for the new	2014-06-08 13:03:35 -07:00
page_alloc.c	mm, pcp: allow restoring percpu_pagelist_fraction default	2014-06-23 16:47:43 -07:00
page_cgroup.c	…
page_io.c	fix __swap_writepage() compile failure on old gcc versions	2014-06-14 19:30:48 -05:00
page_isolation.c	…
pagewalk.c	…
percpu-km.c	…
percpu-vm.c	…
percpu.c	…
pgtable-generic.c	…
process_vm_access.c	…
quicklist.c	…
readahead.c	…
rmap.c	mm: let mm_find_pmd fix buggy race with THP fault	2014-06-23 16:47:44 -07:00
shmem.c	shmem: fix faulting into a hole while it's punched	2014-06-23 16:47:44 -07:00
slab.c	slab: fix oops when reading /proc/slab_allocators	2014-06-23 16:47:44 -07:00
slab.h	memcg, slab: merge memcg_{bind,release}_pages to memcg_{un}charge_slab	2014-06-04 16:54:01 -07:00
slab_common.c	slab: delete cache from list after __kmem_cache_shutdown succeeds	2014-06-04 16:54:08 -07:00
slob.c	slab: get_online_mems for kmem_cache_{create,destroy,shrink}	2014-06-04 16:53:59 -07:00
slub.c	slub: search partial list on numa_mem_id(), instead of numa_node_id()	2014-06-06 16:08:06 -07:00
sparse-vmemmap.c	…
sparse.c	…
swap.c	mm: non-atomically mark page accessed during page cache allocation where possible	2014-06-04 16:54:10 -07:00
swap_state.c	mm: page_alloc: convert hot/cold parameter and immediate callers to bool	2014-06-04 16:54:09 -07:00
swapfile.c	mm/swapfile.c: delete the "last_in_cluster < scan_base" loop in the body of scan_swap_map()	2014-06-04 16:54:12 -07:00
truncate.c	…
util.c	…
vmacache.c	mm,vmacache: optimize overflow system-wide flushing	2014-06-04 16:53:57 -07:00
vmalloc.c	mm/vmalloc.c: export unmap_kernel_range()	2014-06-04 16:54:14 -07:00
vmpressure.c	…
vmscan.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-06-12 10:30:18 -07:00
vmstat.c	mm: use the light version __mod_zone_page_state in mlocked_vma_newpage()	2014-06-04 16:54:07 -07:00
workingset.c	…
zbud.c	mm/zbud.c: make size unsigned like unique callsite	2014-06-04 16:54:13 -07:00
zsmalloc.c	zsmalloc: fixup trivial zs size classes value in comments	2014-06-04 16:54:13 -07:00
zswap.c	mm/zswap: NUMA aware allocation for zswap_dstmem	2014-06-04 16:54:14 -07:00