Messages in this thread | | | Date | Wed, 12 Aug 2015 14:27:34 +0200 | From | Michal Hocko <> | Subject | Re: mm: use after free and panic in free_pages_and_swap_cache |
| |
On Mon 10-08-15 09:37:06, Sasha Levin wrote: > Hi all,
Hi Sasha,
> While fuzzing with trinity inside a KVM tools guest running -next I've > stumbled on the following:
Could post your config somewhere please? Or maybe just the disassemble of free_pages_and_swap_cache and tlb_flush_mmu_free should be sufficient.
I am not sure I read the report properly. It all seem to point to free_pages_and_swap_cache resp. tlb_flush_mmu_free but I fail to see what could be wrong there. The last reference on the page should be dropped in release_pages. The given pages array shouldn't be freed behind our back as well because mmu_gather is local to this path.
-- Michal Hocko SUSE Labs
| |