Shiraz Hashim 48f5cffe36 mm: pagewalk: call pte_hole() for VM_PFNMAP during walk_page_range ... commit 23aaed6659df9adfabe9c583e67a36b54e21df46 upstream. walk_page_range() silently skips vma having VM_PFNMAP set, which leads to undesirable behaviour at client end (who called walk_page_range). Userspace applications get the wrong data, so the effect is like just confusing users (if the applications just display the data) or sometimes killing the processes (if the applications do something with misunderstanding virtual addresses due to the wrong data.) For example for pagemap_read, when no callbacks are called against VM_PFNMAP vma, pagemap_read may prepare pagemap data for next virtual address range at wrong index. Eventually userspace may get wrong pagemap data for a task. Corresponding to a VM_PFNMAP marked vma region, kernel may report mappings from subsequent vma regions. User space in turn may account more pages (than really are) to the task. In my case I was using procmem, procrack (Android utility) which uses pagemap interface to account RSS pages of a task. Due to this bug it was giving a wrong picture for vmas (with VM_PFNMAP set). Fixes: a9ff785e44 ("mm/pagewalk.c: walk_page_range should avoid VM_PFNMAP areas") Signed-off-by: Shiraz Hashim <shashim@codeaurora.org> Acked-by: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2015-02-11 14:48:16 +08:00
..
backing-dev.c	bdi: avoid oops on device removal	2014-04-26 17:15:35 -07:00
balloon_compaction.c	mm: introduce a common interface for balloon pages mobility	2012-12-11 17:22:26 -08:00
bootmem.c	mm: Add alloc_bootmem_low_pages_nopanic()	2013-01-29 19:32:59 -08:00
bounce.c	mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored	2013-10-13 16:08:33 -07:00
cleancache.c	mm: cleancache: clean up cleancache_enabled	2013-04-30 17:04:01 -07:00
compaction.c	mm/compaction: make isolate_freepages start at pageblock boundary	2014-06-16 13:42:53 -07:00
debug-pagealloc.c
dmapool.c	dmapool: make DMAPOOL_DEBUG detect corruption of free marker	2012-12-11 17:22:24 -08:00
fadvise.c	teach SYSCALL_DEFINE<n> how to deal with long long/unsigned long long	2013-03-03 22:46:22 -05:00
failslab.c
filemap.c	mm: memcg: handle non-error OOM situations more gracefully	2014-11-21 09:22:56 -08:00
filemap_xip.c	lift sb_start_write() out of ->write()	2013-04-09 14:12:56 -04:00
fremap.c	mm: fix use-after-free in sys_remap_file_pages	2014-01-09 12:24:24 -08:00
frontswap.c	mm: frontswap: invalidate expired data on a dup-store failure	2014-12-16 09:09:41 -08:00
highmem.c	Some nice cleanups, and even a patch my wife did as a "live" demo for	2012-12-20 08:37:05 -08:00
huge_memory.c	mm: numa: Do not mark PTEs pte_numa when splitting huge pages	2014-10-09 12:18:42 -07:00
hugetlb.c	mm: hugetlb: fix copy_hugetlb_page_range()	2014-07-31 12:53:51 -07:00
hugetlb_cgroup.c	mm/hugetlb: create hugetlb cgroup file in hugetlb_init	2012-12-18 15:02:15 -08:00
hwpoison-inject.c	memcg: rename config variables	2012-07-31 18:42:43 -07:00
init-mm.c
internal.h	mm: accelerate munlock() treatment of THP pages	2013-02-27 19:10:09 -08:00
interval_tree.c	mm: add CONFIG_DEBUG_VM_RB build option	2012-10-09 16:22:42 +09:00
Kconfig	mmKconfig: add an option to disable bounce	2013-04-29 15:54:40 -07:00
Kconfig.debug
kmemcheck.c
kmemleak-test.c
kmemleak.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
ksm.c	mm: close PageTail race	2014-04-03 12:01:05 -07:00
maccess.c
madvise.c	mm: madvise: complete input validation before taking lock	2013-04-29 15:54:37 -07:00
Makefile	memcg: add memory.pressure_level events	2013-04-29 15:54:38 -07:00
memblock.c	memblock: fix missing comment of memblock_insert_region()	2013-04-29 15:54:38 -07:00
memcontrol.c	mm: memcg: handle non-error OOM situations more gracefully	2014-11-21 09:22:56 -08:00
memory-failure.c	mm/memory-failure.c: don't let collect_procs() skip over processes for MF_ACTION_REQUIRED	2014-06-30 20:09:42 -07:00
memory.c	mm: propagate error from stack expansion even for guard page	2015-01-16 06:59:03 -08:00
memory_hotplug.c	mm/memory_hotplug.c: fix printk format warnings	2013-05-24 16:22:52 -07:00
mempolicy.c	cpuset,mempolicy: fix sleeping function called from invalid context	2014-07-17 15:58:00 -07:00
mempool.c
migrate.c	mm: numa: avoid unnecessary work on the failure path	2014-01-09 12:24:23 -08:00
mincore.c	swap: make each swap partition have one address_space	2013-02-23 17:50:17 -08:00
mlock.c	mm: try_to_unmap_cluster() should lock_page() before mlocking	2014-05-06 07:55:32 -07:00
mm_init.c	mm: init: report on last-nid information stored in page->flags	2013-02-23 17:50:18 -08:00
mmap.c	mm: Don't count the stack guard page towards RLIMIT_STACK	2015-01-16 06:59:03 -08:00
mmu_context.c	mm: remove old aio use_mm() comment	2013-05-07 18:38:27 -07:00
mmu_notifier.c	mm: mmu_notifier: re-fix freed page still mapped in secondary MMU	2013-05-24 16:22:51 -07:00
mmzone.c	mm: rename page struct field helpers	2013-02-23 17:50:18 -08:00
mprotect.c	mm: fix TLB flush race between migration, and change_protection_range	2014-01-09 12:24:23 -08:00
mremap.c	mm, thp: close race between mremap() and split_huge_page()	2014-06-07 13:25:31 -07:00
msync.c
nobootmem.c	mm, nobootmem: do memset() after memblock_reserve()	2013-04-29 15:54:39 -07:00
nommu.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-01 07:21:43 -07:00
oom_kill.c	mm: memcg: handle non-error OOM situations more gracefully	2014-11-21 09:22:56 -08:00
page-writeback.c	mm: __set_page_dirty_nobuffers() uses spin_lock_irqsave() instead of spin_lock_irq()	2014-02-20 11:06:11 -08:00
page_alloc.c	OOM, PM: OOM killed task shouldn't escape PM suspend	2014-11-14 08:47:58 -08:00
page_cgroup.c	cgroup/kmemleak: add kmemleak_free() for cgroup deallocations.	2014-11-14 08:47:59 -08:00
page_io.c	Merge branch 'for-3.10/core' of git://git.kernel.dk/linux-block	2013-05-08 10:13:35 -07:00
page_isolation.c	mm: fix zone_watermark_ok_safe() accounting of isolated pages	2013-01-04 16:11:46 -08:00
pagewalk.c	mm: pagewalk: call pte_hole() for VM_PFNMAP during walk_page_range	2015-02-11 14:48:16 +08:00
percpu-km.c
percpu-vm.c	percpu: perform tlb flush after pcpu_map_pages() failure	2014-10-05 14:54:13 -07:00
percpu.c	Revert "percpu: free percpu allocation info for uniprocessor system"	2014-11-14 08:47:53 -08:00
pgtable-generic.c	mm: fix TLB flush race between migration, and change_protection_range	2014-01-09 12:24:23 -08:00
process_vm_access.c	Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and security keys	2013-03-12 11:05:45 -07:00
quicklist.c
readahead.c	teach SYSCALL_DEFINE<n> how to deal with long long/unsigned long long	2013-03-03 22:46:22 -05:00
rmap.c	mm: fix sleeping function warning from __put_anon_vma	2014-06-30 20:09:42 -07:00
shmem.c	shmem: fix nlink for rename overwrite directory	2014-10-05 14:54:11 -07:00
slab.c	slab: fix init_lock_keys	2013-07-21 18:21:26 -07:00
slab.h	memcg: check that kmem_cache has memcg_params before accessing it	2013-09-07 22:09:58 -07:00
slab_common.c	slab_common: fix the check for duplicate slab names	2014-07-31 12:53:50 -07:00
slob.c	mm: rename page struct field helpers	2013-02-23 17:50:18 -08:00
slub.c	slub: Fix calculation of cpu slabs	2014-02-13 13:48:00 -08:00
sparse-vmemmap.c	sparse-vmemmap: specify vmemmap population range in bytes	2013-04-29 15:54:35 -07:00
sparse.c	mm, hotplug: avoid compiling memory hotremove functions when disabled	2013-04-29 15:54:37 -07:00
swap.c	mm: close PageTail race	2014-04-03 12:01:05 -07:00
swap_state.c	swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion	2013-06-12 16:29:45 -07:00
swapfile.c	frontswap: fix incorrect zeroing and allocation size for frontswap_map	2013-06-12 16:29:46 -07:00
truncate.c	mm: Remove false WARN_ON from pagecache_isize_extended()	2014-11-14 08:48:00 -08:00
util.c	vm_is_stack: use for_each_thread() rather then buggy while_each_thread()	2014-10-05 14:54:16 -07:00
vmalloc.c	mm/vmalloc.c: fix an overflow bug in alloc_vmap_area()	2013-11-13 12:05:34 +09:00
vmpressure.c	memcg: add memory.pressure_level events	2013-04-29 15:54:38 -07:00
vmscan.c	mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed	2015-01-16 06:59:03 -08:00
vmstat.c	mm: numa: return the number of base pages altered by protection changes	2013-12-08 07:29:27 -08:00