Greg Pearson 757fcf2b6d mm/memblock: fix overlapping allocation when doubling reserved array ... commit 48c3b583bb upstream. __alloc_memory_core_early() asks memblock for a range of memory then try to reserve it. If the reserved region array lacks space for the new range, memblock_double_array() is called to allocate more space for the array. If memblock is used to allocate memory for the new array it can end up using a range that overlaps with the range originally allocated in __alloc_memory_core_early(), leading to possible data corruption. With this patch memblock_double_array() now calls memblock_find_in_range() with a narrowed candidate range (in cases where the reserved.regions array is being doubled) so any memory allocated will not overlap with the original range that was being reserved. The range is narrowed by passing in the starting address and size of the previously allocated range. Then the range above the ending address is searched and if a candidate is not found, the range below the starting address is searched. Signed-off-by: Greg Pearson <greg.pearson@hp.com> Signed-off-by: Yinghai Lu <yinghai@kernel.org> Acked-by: Tejun Heo <tj@kernel.org> Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2012-07-16 09:04:27 -07:00
..
backing-dev.c	backing-dev: fix wakeup timer races with bdi_unregister()	2012-02-01 16:52:49 +08:00
bootmem.c	bootmem/sparsemem: remove limit constraint in alloc_bootmem_section	2012-03-21 17:54:58 -07:00
bounce.c	mm: remove the second argument of k[un]map_atomic()	2012-03-20 21:48:27 +08:00
cleancache.c	mm: cleancache: Use __read_mostly as appropiate.	2012-01-23 16:08:09 -05:00
compaction.c	mm: compaction: make compact_control order signed	2012-03-21 17:54:56 -07:00
debug-pagealloc.c
dmapool.c
fadvise.c	fadvise: only initiate writeback for specified range with FADV_DONTNEED	2012-01-10 16:30:43 -08:00
failslab.c	switch debugfs to umode_t	2012-01-03 22:54:56 -05:00
filemap.c	radix-tree: use iterators in find_get_pages* functions	2012-03-28 17:14:37 -07:00
filemap_xip.c	mm/filemap_xip.c: fix race condition in xip_file_fault()	2012-02-03 16:16:41 -08:00
fremap.c
highmem.c
huge_memory.c	thp: optimize away unnecessary page table locking	2012-03-21 17:54:57 -07:00
hugetlb.c	mm: fix vma_resv_map() NULL pointer	2012-06-10 00:36:11 +09:00
hwpoison-inject.c	HWPOISON: Clean up memory_failure() vs. __memory_failure()	2012-01-03 12:06:32 -08:00
init-mm.c
internal.h
Kconfig
Kconfig.debug	mm: more intensive memory corruption debugging	2012-01-10 16:30:42 -08:00
kmemcheck.c
kmemleak-test.c
kmemleak.c	kmemleak: Disable early logging when kmemleak is off by default	2012-01-20 16:57:05 +00:00
ksm.c	ksm: cleanup: introduce find_mergeable_vma()	2012-03-21 17:54:59 -07:00
maccess.c
madvise.c	coredump: add VM_NODUMP, MADV_NODUMP, MADV_CLEAR_NODUMP	2012-03-23 16:58:42 -07:00
Makefile
memblock.c	mm/memblock: fix overlapping allocation when doubling reserved array	2012-07-16 09:04:27 -07:00
memcontrol.c	memcg,thp: fix res_counter:96 regression	2012-05-19 10:10:27 -07:00
memory-failure.c	Merge branch 'x86-mce-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2012-03-22 09:42:04 -07:00
memory.c	coredump: remove VM_ALWAYSDUMP flag	2012-03-23 16:58:42 -07:00
memory_hotplug.c	mm: compaction: introduce sync-light migration for use by compaction	2012-01-12 20:13:09 -08:00
mempolicy.c	mm: mempolicy: Let vma_merge and vma_split handle vma->vm_policy linkages	2012-06-01 15:18:19 +08:00
mempool.c	mempool: fix first round failure behavior	2012-01-10 16:30:45 -08:00
migrate.c	mm: fix NULL ptr dereference in move_pages	2012-04-25 21:26:34 -07:00
mincore.c	mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode	2012-03-21 17:54:54 -07:00
mlock.c	vm: avoid using find_vma_prev() unnecessarily	2012-03-06 18:23:36 -08:00
mm_init.c
mmap.c	kill mm argument of vm_munmap()	2012-04-21 01:58:20 -04:00
mmu_context.c	mm, counters: remove task argument to sync_mm_rss() and __sync_task_rss_stat()	2012-03-21 17:54:59 -07:00
mmu_notifier.c
mmzone.c
mprotect.c	Merge branch 'akpm' (Andrew's patch-bomb)	2012-03-22 09:04:48 -07:00
mremap.c	mm: collapse security_vm_enough_memory() variants into a single function	2012-02-14 10:45:39 +11:00
msync.c
nobootmem.c	mm: nobootmem: fix sign extend problem in __free_pages_memory()	2012-05-10 15:06:44 -07:00
nommu.c	kill mm argument of vm_munmap()	2012-04-21 01:58:20 -04:00
oom_kill.c	signal: oom_kill_task: use SEND_SIG_FORCED instead of force_sig()	2012-03-23 16:58:41 -07:00
page-writeback.c	Ext4 commits for 3.3 merge window; mostly cleanups and bug fixes	2012-03-28 10:02:55 -07:00
page_alloc.c	mm: raise MemFree by reverting percpu_pagelist_fraction to 0	2012-05-11 09:23:39 -07:00
page_cgroup.c	page_cgroup: fix horrid swap accounting regression	2012-03-06 08:18:23 -08:00
page_io.c
page_isolation.c
pagewalk.c	mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode	2012-03-21 17:54:54 -07:00
percpu-km.c
percpu-vm.c	percpu: use bitmap_clear	2012-01-20 09:23:16 -08:00
percpu.c	kmemleak: Fix the kmemleak tracking of the percpu areas with !SMP	2012-05-09 10:13:29 -07:00
pgtable-generic.c	thp: add HPAGE_PMD_* definitions for !CONFIG_TRANSPARENT_HUGEPAGE	2012-03-21 17:55:02 -07:00
prio_tree.c
process_vm_access.c	Fix race in process_vm_rw_core	2012-02-02 12:55:17 -08:00
quicklist.c
readahead.c
rmap.c	memcg: use new logic for page stat accounting	2012-03-21 17:55:01 -07:00
shmem.c	Merge branch 'akpm' (Andrew's patch-bomb)	2012-03-22 09:04:48 -07:00
slab.c	Merge branch 'slab/for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/penberg/linux	2012-03-28 15:04:26 -07:00
slob.c
slub.c	slub: fix a memory leak in get_partial_node()	2012-06-10 00:36:11 +09:00
sparse-vmemmap.c
sparse.c	bootmem/sparsemem: remove limit constraint in alloc_bootmem_section	2012-03-21 17:54:58 -07:00
swap.c	mm: drain percpu lru add/rotate page-vectors on cpu hot-unplug	2012-03-21 17:54:58 -07:00
swap_state.c	mm: fix s390 BUG by __set_page_dirty_no_writeback on swap	2012-04-23 18:19:22 -07:00
swapfile.c	swap: fix shmem swapping when more than 8 areas	2012-06-22 11:36:55 -07:00
thrash.c
truncate.c	mm for fs: add truncate_pagecache_range()	2012-03-28 17:14:35 -07:00
util.c	procfs: mark thread stack correctly in proc/<pid>/maps	2012-03-21 17:54:58 -07:00
vmalloc.c	mm: fix faulty initialization in vmalloc_init()	2012-06-10 00:36:06 +09:00
vmscan.c	mm: consider all swapped back pages in used-once logic	2012-06-10 00:36:06 +09:00
vmstat.c	mm: fix up the vmscan stat in vmstat	2012-04-25 21:26:33 -07:00