Linus Torvalds ee4bb2579e futex: fix handling of read-only-mapped hugepages ...

commit f12d5bfceb upstream.

The hugepage code had the exact same bug that regular pages had in
commit 7485d0d375 ("futexes: Remove rw parameter from
get_futex_key()").

The regular page case was fixed by commit 9ea71503a8 ("futex: Fix
regression with read only mappings"), but the transparent hugepage case
(added in a5b338f2b0: "thp: update futex compound knowledge") case
remained broken.

Found by Dave Jones and his trinity tool.

Reported-and-tested-by: Dave Jones <davej@fedoraproject.org>
Acked-by: Thomas Gleixner <tglx@linutronix.de>
Cc: Mel Gorman <mgorman@suse.de>
Cc: Darren Hart <dvhart@linux.intel.com>
Cc: Andrea Arcangeli <aarcange@redhat.com>
Cc: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-12-20 07:34:19 -08:00

..

debug

kdb,vt_console: Fix missed data due to pager overruns

2012-10-21 09:27:59 -07:00

events

perf: Fix perf_cgroup_switch for sw-events

2013-10-01 09:10:52 -07:00

gcov

…

irq

irq: Enable all irqs unconditionally in irq_resume

2013-12-11 22:34:11 -08:00

power

PM / hibernate: Avoid overflow in hibernate_preallocate_memory()

2013-12-04 10:50:31 -08:00

sched

sched/fair: Fix small race where child->se.parent,cfs_rq might point to invalid ones

2013-10-01 09:10:51 -07:00

time

alarmtimer: return EINVAL instead of ENOTSUPP if rtcdev doesn't exist

2013-12-04 10:50:14 -08:00

trace

ftrace: Fix function graph with loading of modules

2013-12-04 10:50:34 -08:00

.gitignore

…

acct.c

…

async.c

Fix a dead loop in async_synchronize_full()

2012-10-02 10:30:35 -07:00

audit_tree.c

kernel/audit_tree.c: tree will leak memory when failure occurs in audit_trim_trees()

2013-05-11 13:48:14 -07:00

audit_watch.c

…

audit.c

audit: fix info leak in AUDIT_GET requests

2013-12-04 10:50:32 -08:00

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

cgroup_freezer.c

…

cgroup.c

cgroup: fail if monitored file and event_control are in different cgroup

2013-10-01 09:10:51 -07:00

compat.c

compat: Fix RT signal mask corruption via sigprocmask

2012-05-10 08:58:33 -07:00

configs.c

…

cpu_pm.c

…

cpu.c

CPU hotplug: provide a generic helper to disable/enable CPU hotplug

2013-06-20 11:58:44 -07:00

cpuset.c

cpuset: Fix memory allocator deadlock

2013-12-04 10:50:34 -08:00

crash_dump.c

…

cred.c

cred: copy_process() should clear child->replacement_session_keyring

2012-04-11 08:20:11 -07:00

delayacct.c

…

dma.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

elfcore.c

…

exec_domain.c

…

exit.c

posix_types.h: Cleanup stale __NFDBITS and related definitions

2012-08-09 08:31:39 -07:00

extable.c

…

fork.c

mm/fork: fix overflow in vma length when copying mmap on clone

2012-06-10 00:36:06 +09:00

freezer.c

…

futex_compat.c

futex: Revert "futex: Mark get_robust_list as deprecated"

2013-02-28 06:59:01 -08:00

futex.c

futex: fix handling of read-only-mapped hugepages

2013-12-20 07:34:19 -08:00

groups.c

…

hrtimer.c

hrtimers: Move SMP function call to thread context

2013-07-28 16:26:47 -07:00

hung_task.c

…

irq_work.c

irq_work: fix compile failure on tile from missing include

2012-04-13 13:15:16 -04:00

itimer.c

itimer: Use printk_once instead of WARN_ONCE

2012-04-10 11:00:30 +02:00

jump_label.c

…

kallsyms.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage

2012-03-23 13:18:57 +01:00

Kconfig.preempt

locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage

2012-03-23 13:18:57 +01:00

kexec.c

Merge branch 'akpm' (Andrew's patch-bomb)

2012-03-28 17:19:28 -07:00

kfifo.c

…

kmod.c

usermodehelper: check subprocess_info->path != NULL

2013-05-19 10:54:50 -07:00

kprobes.c

…

ksysfs.c

…

kthread.c

kthread_worker: reimplement flush_kthread_work() to allow freeing the work item being executed

2012-10-02 10:30:40 -07:00

latencytop.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

…

Makefile

…

module.c

module: fix out-by-one error in kallsyms

2012-11-26 11:37:41 -08:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

nsproxy.c

…

padata.c

padata: Fix cpu hotplug

2012-03-29 19:52:46 +08:00

panic.c

panic: fix a possible deadlock in panic()

2013-04-12 09:38:47 -07:00

params.c

params: <level>_initcall-like kernel parameters

2012-03-26 12:50:51 +10:30

pid_namespace.c

pidns: add reboot_pid_ns() to handle the reboot syscall

2012-03-28 17:14:36 -07:00

pid.c

…

posix-cpu-timers.c

posix-cpu-timers: Fix nanosleep task_struct leak

2013-02-28 06:58:59 -08:00

posix-timers.c

posix-timer: Don't call idr_find() with out-of-range ID

2013-03-04 06:06:38 +08:00

printk.c

printk: fix buffer overflow when calling log_prefix function from call_console_drivers

2013-02-21 10:04:57 -08:00

profile.c

…

ptrace.c

exec/ptrace: fix get_dumpable() incorrect tests

2013-11-29 10:50:34 -08:00

range.c

…

rcu.h

…

rcupdate.c

…

rcutiny_plugin.h

…

rcutiny.c

…

rcutorture.c

…

rcutree_plugin.h

…

rcutree_trace.c

…

rcutree.c

rcu: Fix batch-limit size problem

2012-12-17 10:37:46 -08:00

rcutree.h

…

relay.c

splice: fix racy pipe->buffers uses

2012-07-16 09:04:42 -07:00

res_counter.c

…

resource.c

kernel/resource.c: fix stack overflow in __reserve_region_with_split()

2013-02-14 10:48:53 -08:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

…

rtmutex-tester.c

…

rtmutex.c

…

rtmutex.h

…

rwsem.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

seccomp.c

…

semaphore.c

…

signal.c

kernel/signal.c: stop info leak via the tkill and the tgkill syscalls

2013-04-25 21:19:54 -07:00

smp.c

smp: Fix SMP function call empty cpu mask race

2013-02-03 18:24:42 -06:00

softirq.c

…

spinlock.c

locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage

2012-03-23 13:18:57 +01:00

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

reboot: rigrate shutdown/reboot to boot cpu

2013-06-20 11:58:45 -07:00

sysctl_binary.c

sysctl: fix null checking in bin_dn_node_address()

2013-03-04 06:06:41 +08:00

sysctl.c

sysctl: fix write access to dmesg_restrict/kptr_restrict

2012-04-05 14:51:43 +10:00

taskstats.c

…

test_kprobes.c

…

time.c

…

timeconst.pl

timeconst.pl: Eliminate Perl warning

2013-02-28 06:58:58 -08:00

timer.c

timer: Fix jiffies wrap behavior of round_jiffies_common()

2013-07-21 18:19:01 -07:00

tracepoint.c

…

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

…

watchdog.c

watchdog: using u64 in get_sample_period()

2012-12-03 11:47:17 -08:00

workqueue_sched.h

…

workqueue.c

workqueue: consider work function when searching for busy work items

2013-08-29 09:50:12 -07:00