Messages in this thread |  | | | Date | Sun, 22 May 2005 15:00:31 -0700 | | From | Andrew Morton <> | | Subject | Re: [bugfix] try_to_unmap_cluster() passes out-of-bounds pte to pte_unmap() |
| |
William Lee Irwin III <wli@holomorphy.com> wrote: > > try_to_unmap_cluster() does: > for (pte = pte_offset_map(pmd, address); > address < end; pte++, address += PAGE_SIZE) { > ... > } > > pte_unmap(pte); > > It may take a little staring to notice, but pte can actually fall off > the end of the pte page in this iteration,
That's about the third place we've had this bug. Whoever keeps adding it really should stop.
Thanks. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |