lkml.org 
[lkml]   [2005]   [May]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [bugfix] try_to_unmap_cluster() passes out-of-bounds pte to pte_unmap()
William Lee Irwin III <wli@holomorphy.com> wrote:
>
> try_to_unmap_cluster() does:
> for (pte = pte_offset_map(pmd, address);
> address < end; pte++, address += PAGE_SIZE) {
> ...
> }
>
> pte_unmap(pte);
>
> It may take a little staring to notice, but pte can actually fall off
> the end of the pte page in this iteration,

That's about the third place we've had this bug. Whoever keeps adding it
really should stop.

Thanks.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-05-23 00:04    [W:0.306 / U:0.284 seconds]
©2003-2014 Jasper Spaans. Advertise on this site