Johannes Weiner de15f7b048 mm: fix possible off-by-one in walk_pte_range() ...

commit 556637cdab upstream


After the loop in walk_pte_range() pte might point to the first address after
the pmd it walks.  The pte_unmap() is then applied to something bad.

Spotted by Roel Kluin and Andreas Schwab.

Signed-off-by: Johannes Weiner <hannes@saeurebad.de>
Cc: Roel Kluin <12o3l@tiscali.nl>
Cc: Andreas Schwab <schwab@suse.de>
Acked-by: Matt Mackall <mpm@selenic.com>
Acked-by: Mikael Pettersson <mikpe@it.uu.se>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2008-05-01 14:44:38 -07:00

..

allocpercpu.c

alloc_percpu() fails to allocate percpu data

2008-03-04 16:35:11 -08:00

backing-dev.c

…

bootmem.c

mm: fix boundary checking in free_bootmem_core

2008-03-24 19:22:19 -07:00

bounce.c

…

dmapool.c

…

fadvise.c

check ADVICE of fadvise64_64 even if get_xip_page is given

2008-02-05 09:44:19 -08:00

filemap_xip.c

Use pgoff_t instead of unsigned long

2008-02-08 09:22:32 -08:00

filemap.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

fremap.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

highmem.c

mm: highmem kernel-doc additions

2008-03-19 18:53:35 -07:00

hugetlb.c

hugetlb: fix potential livelock in return_unused_surplus_hugepages()

2008-03-26 15:01:33 -07:00

internal.h

Solve section mismatch for free_area_init_core.

2008-02-23 17:13:24 -08:00

Kconfig

…

madvise.c

…

Makefile

Memory controller: rename to Memory Resource Controller

2008-03-04 16:35:12 -08:00

memcontrol.c

memcg: fix node_state handling

2008-04-08 18:25:53 -07:00

memory_hotplug.c

Page allocator: clean up pcp draining functions

2008-02-05 09:44:17 -08:00

memory.c

memcg: when do_swap's do_wp_page fails

2008-03-04 16:35:14 -08:00

mempolicy.c

mempolicy: fix reference counting bugs

2008-03-10 18:01:19 -07:00

mempool.c

…

migrate.c

memcg: fix VM_BUG_ON from page migration

2008-03-04 16:35:14 -08:00

mincore.c

…

mlock.c

…

mmap.c

mm: special mapping nopage

2008-02-08 18:57:39 -08:00

mmzone.c

…

mprotect.c

…

mremap.c

…

msync.c

…

nommu.c

nommu: add new vmalloc_user() and remap_vmalloc_range() interfaces.

2008-02-05 09:44:21 -08:00

oom_kill.c

memcg: fix oops in oom handling

2008-04-15 19:35:40 -07:00

page_alloc.c

memcg: bad page if page_cgroup when free

2008-03-04 16:35:15 -08:00

page_io.c

mm: fix PageUptodate data race

2008-02-05 09:44:19 -08:00

page_isolation.c

…

page-writeback.c

writeback: speed up writeback of big dirty files

2008-02-05 09:44:19 -08:00

pagewalk.c

mm: fix possible off-by-one in walk_pte_range()

2008-05-01 14:44:38 -07:00

pdflush.c

…

prio_tree.c

…

quicklist.c

…

readahead.c

mm/readahead: fix kernel-doc notation

2008-03-19 18:53:37 -07:00

rmap.c

mm: rmap kernel-doc fixes

2008-03-19 18:53:35 -07:00

shmem_acl.c

…

shmem.c

mm/shmem and tiny-shmem: fix some kernel-doc

2008-03-19 18:53:35 -07:00

slab.c

slab: fix cache_cache bootstrap in kmem_cache_init()

2008-03-26 10:44:17 -07:00

slob.c

slob: reduce external fragmentation by using three free lists

2008-02-05 09:44:19 -08:00

slub.c

Fix undefined count_partial if !CONFIG_SLABINFO

2008-04-01 12:44:06 -07:00

sparse-vmemmap.c

NULL noise: fs/*, mm/*, kernel/*

2008-03-30 14:18:41 -07:00

sparse.c

mm: sparsemem memory_present() fix

2008-04-15 19:30:19 -07:00

swap_state.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

swap.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

swapfile.c

d_path: Make seq_path() use a struct path argument

2008-02-14 21:17:08 -08:00

thrash.c

…

tiny-shmem.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs-2.6

2008-03-25 08:57:47 -07:00

truncate.c

docbook: fix kernel-api source files

2008-03-03 10:47:14 -08:00

util.c

…

vmalloc.c

mm: fix various kernel-doc comments

2008-03-19 18:53:35 -07:00

vmscan.c

revert "kswapd should only wait on IO if there is IO"

2008-03-24 19:22:19 -07:00

vmstat.c

add "Isolate" migratetype name to /proc/pagetypeinfo

2008-04-15 19:35:41 -07:00