iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/mm
History
Jason Gunthorpe 14331726a3 mm/hmm: Remove confusing comment and logic from hmm_release 
hmm_release() is called exactly once per hmm. ops->release() cannot
accidentally trigger any action that would recurse back onto
hmm->mirrors_sem.

This fixes a use after-free race of the form:

       CPU0                                   CPU1
                                           hmm_release()
                                             up_write(&hmm->mirrors_sem);
 hmm_mirror_unregister(mirror)
  down_write(&hmm->mirrors_sem);
  up_write(&hmm->mirrors_sem);
  kfree(mirror)
                                             mirror->ops->release(mirror)

The only user we have today for ops->release is an empty function, so this
is unambiguously safe.

As a consequence of plugging this race drivers are not allowed to
register/unregister mirrors from within a release op.

Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Tested-by: Philip Yang <Philip.Yang@amd.com>
2019-06-24 17:38:18 -03:00
..
kasan
kasan: initialize tag to 0xff in __kasan_kmalloc
2019-06-01 15:51:31 -07:00
backing-dev.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
balloon_compaction.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
cleancache.c
…
cma_debug.c
mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
2019-05-14 09:47:45 -07:00
cma.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 98
2019-05-24 17:37:54 +02:00
cma.h
…
compaction.c
mm, compaction: make sure we isolate a valid PFN
2019-06-01 15:51:32 -07:00
debug_page_ref.c
…
debug.c
mm: update references to page _refcount
2019-05-14 19:52:47 -07:00
dmapool.c
docs/core-api/mm: fix return value descriptions in mm/
2019-03-05 21:07:20 -08:00
early_ioremap.c
…
fadvise.c
…
failslab.c
mm: no need to check return value of debugfs_create functions
2019-03-05 21:07:17 -08:00
filemap.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
frame_vector.c
…
frontswap.c
…
gup_benchmark.c
mm/gup: replace get_user_pages_longterm() with FOLL_LONGTERM
2019-05-14 09:47:45 -07:00
gup.c
mm/gup: continue VM_FAULT_RETRY processing even for pre-faults
2019-06-01 15:51:31 -07:00
highmem.c
…
hmm.c
mm/hmm: Remove confusing comment and logic from hmm_release
2019-06-24 17:38:18 -03:00
huge_memory.c
mm/huge_memory.c: make __thp_get_unmapped_area static
2019-05-14 09:47:51 -07:00
hugetlb_cgroup.c
…
hugetlb.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
hwpoison-inject.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
init-mm.c
…
internal.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
interval_tree.c
…
Kconfig
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
Kconfig.debug
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
khugepaged.c
mm/mmu_notifier: use correct mmu_notifier events for each invalidation
2019-05-14 09:47:49 -07:00
kmemleak-test.c
…
kmemleak.c
Merge branch 'core-stacktrace-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2019-05-06 13:11:48 -07:00
ksm.c
mm/mmu_notifier: use correct mmu_notifier events for each invalidation
2019-05-14 09:47:49 -07:00
list_lru.c
memcg: make it work on sparse non-0-node systems
2019-06-01 15:51:31 -07:00
maccess.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
madvise.c
mm/mmu_notifier: use correct mmu_notifier events for each invalidation
2019-05-14 09:47:49 -07:00
Makefile
mm: shuffle initial free memory to improve memory-side-cache utilization
2019-05-14 19:52:48 -07:00
memblock.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
memcontrol.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
memfd.c
mm: page cache: store only head pages in i_pages
2019-05-14 09:47:45 -07:00
memory_hotplug.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
memory-failure.c
…
memory.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mempolicy.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 225
2019-05-30 11:29:56 -07:00
mempool.c
docs/core-api/mm: fix return value descriptions in mm/
2019-03-05 21:07:20 -08:00
memtest.c
…
migrate.c
mm/mmu_notifier: use correct mmu_notifier events for each invalidation
2019-05-14 09:47:49 -07:00
mincore.c
mm/mincore.c: make mincore() more conservative
2019-05-14 19:52:48 -07:00
mlock.c
mm: remove zone_lru_lock() function, access ->lru_lock directly
2019-03-05 21:07:21 -08:00
mm_init.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mmap.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mmu_context.c
…
mmu_gather.c
asm-generic/tlb: Remove tlb_table_flush()
2019-04-03 10:33:02 +02:00
mmu_notifier.c
mm/mmu_notifier: mmu_notifier_range_update_to_read_only() helper
2019-05-14 09:47:49 -07:00
mmzone.c
…
mprotect.c
mm/mprotect.c: fix compilation warning because of unused 'mm' variable
2019-05-14 09:47:51 -07:00
mremap.c
mm/mmu_notifier: contextual information for event triggering invalidation
2019-05-14 09:47:49 -07:00
msync.c
…
nommu.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
oom_kill.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
page_alloc.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
page_counter.c
…
page_ext.c
memblock: drop memblock_alloc_*_nopanic() variants
2019-03-12 10:04:02 -07:00
page_idle.c
mm: remove zone_lru_lock() function, access ->lru_lock directly
2019-03-05 21:07:21 -08:00
page_io.c
…
page_isolation.c
mm/page_isolation.c: remove redundant pfn_valid_within() in __first_valid_page()
2019-05-14 09:47:46 -07:00
page_owner.c
mm/page_owner: Simplify stack trace handling
2019-04-29 12:37:50 +02:00
page_poison.c
…
page_vma_mapped.c
…
page-writeback.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
pagewalk.c
…
percpu-internal.h
percpu: convert chunk hints to be based on pcpu_block_md
2019-03-13 12:25:31 -07:00
percpu-km.c
percpu: set PCPU_BITMAP_BLOCK_SIZE to PAGE_SIZE
2019-03-13 12:25:31 -07:00
percpu-stats.c
percpu: convert chunk hints to be based on pcpu_block_md
2019-03-13 12:25:31 -07:00
percpu-vm.c
…
percpu.c
Merge branch 'for-5.2' of git://git.kernel.org/pub/scm/linux/kernel/git/dennis/percpu
2019-05-13 15:34:03 -07:00
pgtable-generic.c
…
process_vm_access.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
quicklist.c
…
readahead.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
rmap.c
mm/rmap.c: use the pra.mapcount to do the check
2019-05-14 09:47:49 -07:00
rodata_test.c
…
shmem.c
mm: page cache: store only head pages in i_pages
2019-05-14 09:47:45 -07:00
shuffle.c
mm: maintain randomization of page free lists
2019-05-14 19:52:48 -07:00
shuffle.h
mm: maintain randomization of page free lists
2019-05-14 19:52:48 -07:00
slab_common.c
mm: add support for kmem caches in DMA32 zone
2019-03-29 10:01:37 -07:00
slab.c
slab: remove /proc/slab_allocators
2019-05-16 15:51:55 -07:00
slab.h
mm: add support for kmem caches in DMA32 zone
2019-03-29 10:01:37 -07:00
slob.c
slob: use slab_list instead of lru
2019-05-14 09:47:44 -07:00
slub.c
mm/slub.c: update the comment about slab frozen
2019-05-14 09:47:45 -07:00
sparse-vmemmap.c
…
sparse.c
mm/sparse.c: clean up obsolete code comment
2019-05-14 09:47:48 -07:00
swap_cgroup.c
…
swap_slots.c
…
swap_state.c
mm: page cache: store only head pages in i_pages
2019-05-14 09:47:45 -07:00
swap.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
swapfile.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
truncate.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
usercopy.c
…
userfaultfd.c
hugetlb: use same fault hash key for shared and private mappings
2019-05-14 09:47:48 -07:00
util.c
prctl_set_mm: downgrade mmap_sem to read lock
2019-06-01 15:51:31 -07:00
vmacache.c
…
vmalloc.c
mm/vmalloc.c: fix typo in comment
2019-06-01 15:51:31 -07:00
vmpressure.c
…
vmscan.c
mm: memcontrol: make cgroup stats and events query API explicitly local
2019-05-14 19:52:53 -07:00
vmstat.c
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
workingset.c
mm: memcontrol: make cgroup stats and events query API explicitly local
2019-05-14 19:52:53 -07:00
z3fold.c
z3fold: fix sheduling while atomic
2019-06-01 15:51:31 -07:00
zbud.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
zpool.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
zsmalloc.c
…
zswap.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00