diff options
| author | Chen, Kenneth W <kenneth.w.chen@intel.com> | 2006-10-04 02:15:24 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@g5.osdl.org> | 2006-10-04 07:55:12 -0700 |
| commit | fe1668ae5bf0145014c71797febd9ad5670d5d05 (patch) | |
| tree | a1ad042a0c9b604653ca24645358fe31d1bbcfd6 /mm/bootmem.c | |
| parent | e80ee884ae0e3794ef2b65a18a767d502ad712ee (diff) | |
| download | lwn-fe1668ae5bf0145014c71797febd9ad5670d5d05.tar.gz lwn-fe1668ae5bf0145014c71797febd9ad5670d5d05.zip | |
[PATCH] enforce proper tlb flush in unmap_hugepage_range
Spotted by Hugh that hugetlb page is free'ed back to global pool before
performing any TLB flush in unmap_hugepage_range(). This potentially allow
threads to abuse free-alloc race condition.
The generic tlb gather code is unsuitable to use by hugetlb, I just open
coded a page gathering list and delayed put_page until tlb flush is
performed.
Cc: Hugh Dickins <hugh@veritas.com>
Signed-off-by: Ken Chen <kenneth.w.chen@intel.com>
Acked-by: William Irwin <wli@holomorphy.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'mm/bootmem.c')
0 files changed, 0 insertions, 0 deletions