Re: mm: use-after-free in zap_page_range

From	Dmitry Vyukov <dvyukov@google.com>
Newsgroups	linux.kernel
Subject	Re: mm: use-after-free in zap_page_range
Date	2017-03-08 14:00 +0100
Message-ID	<tiJma-6HB-29@gated-at.bofh.it> (permalink)
References	<tgWQx-2Dz-5@gated-at.bofh.it> <tgYfE-3Kq-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, Mar 3, 2017 at 5:23 PM, Andrea Arcangeli <aarcange@redhat.com> wrote:
> Hello Dmitry,
>
> On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote:
>> The following program triggers use-after-free in zap_page_range:
>> https://gist.githubusercontent.com/dvyukov/b59dfbaa0cb1e5231094d228fa57c9bd/raw/95c4da18cb96f8aaa47c10012d8c4484fd5917ad/gistfile1.txt
>
> I posted the fix for this one yesterday (found while doing more code
> reviews of the upstream code searching for any other potential issue):
>
> https://www.spinics.net/lists/linux-mm/msg122905.html
> https://www.spinics.net/lists/linux-mm/msg122903.html
>
> Could you test with those two applied on top of the others updates
> that are already in -mm?

This is already in mmotm/auto-latest, so we are testing it.

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

mm: use-after-free in zap_page_range Dmitry Vyukov <dvyukov@google.com> - 2017-03-03 16:00 +0100
  Re: mm: use-after-free in zap_page_range Andrea Arcangeli <aarcange@redhat.com> - 2017-03-03 17:30 +0100
    Re: mm: use-after-free in zap_page_range Dmitry Vyukov <dvyukov@google.com> - 2017-03-08 14:00 +0100

csiph-web