Hugh Dickins c3704ceb4a [PATCH] page_mkwrite caller race fix ...

After do_wp_page has tested page_mkwrite, it must release old_page after
acquiring page table lock, not before: at some stage that ordering got
reversed, leaving a (very unlikely) window in which old_page might be
truncated, freed, and reused in the same position.

Signed-off-by: Hugh Dickins <hugh@veritas.com>
Acked-by: Nick Piggin <nickpiggin@yahoo.com.au>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2007-02-11 10:51:17 -08:00

..

allocpercpu.c

…

backing-dev.c

…

bootmem.c

[PATCH] remove EXPORT_UNUSED_SYMBOL'ed symbols

2006-12-07 08:39:44 -08:00

bounce.c

[PATCH] blktrace: only add a bounce trace when we really bounce

2007-01-12 10:46:49 -08:00

fadvise.c

[PATCH] mm: change uses of f_{dentry,vfsmnt} to use f_path

2006-12-08 08:28:43 -08:00

filemap_xip.c

[PATCH] mm: mremap correct rmap accounting

2007-01-30 08:33:32 -08:00

filemap.c

[PATCH] mm: remove find_trylock_page

2007-02-09 08:06:14 -08:00

filemap.h

…

fremap.c

[PATCH] mm: more rmap debugging

2006-12-22 08:55:49 -08:00

highmem.c

…

hugetlb.c

[PATCH] hugetlb: preserve hugetlb pte dirty state

2007-02-09 09:25:46 -08:00

internal.h

…

Kconfig

…

madvise.c

…

Makefile

…

memory_hotplug.c

[PATCH] Fix sparsemem on Cell

2007-01-11 18:18:20 -08:00

memory.c

[PATCH] page_mkwrite caller race fix

2007-02-11 10:51:17 -08:00

mempolicy.c

[PATCH] mbind: restrict nodes to the currently allowed cpuset

2007-01-23 07:52:06 -08:00

mempool.c

…

migrate.c

[PATCH] radix-tree: RCU lockless readside

2006-12-07 08:39:25 -08:00

mincore.c

[PATCH] sys_mincore: s/max/min/

2006-12-17 10:21:53 -08:00

mlock.c

…

mmap.c

[PATCH] Add install_special_mapping

2007-02-09 09:25:47 -08:00

mmzone.c

[PATCH] remove EXPORT_UNUSED_SYMBOL'ed symbols

2006-12-07 08:39:44 -08:00

mprotect.c

…

mremap.c

[PATCH] mm: mremap correct rmap accounting

2007-01-30 08:33:32 -08:00

msync.c

…

nommu.c

[PATCH] struct path: convert mm

2006-12-08 08:28:47 -08:00

oom_kill.c

[PATCH] fix OOM killing of swapoff

2007-01-05 23:55:29 -08:00

page_alloc.c

[PATCH] Avoid excessive sorting of early_node_map[]

2007-02-11 10:51:17 -08:00

page_io.c

[PATCH] swsusp: use block device offsets to identify swap locations

2006-12-07 08:39:27 -08:00

page-writeback.c

Fix balance_dirty_page() calculations with CONFIG_HIGHMEM

2007-01-29 16:37:38 -08:00

pdflush.c

[PATCH] Add include/linux/freezer.h and move definitions from sched.h

2006-12-07 08:39:27 -08:00

prio_tree.c

…

readahead.c

[PATCH] io-accounting-read-accounting nfs fix

2006-12-10 09:55:41 -08:00

rmap.c

[PATCH] page_mkclean_one(): fix call to set_pte_at()

2006-12-30 10:56:42 -08:00

shmem_acl.c

…

shmem.c

[PATCH] Fix for shmem_truncate_range() BUG_ON()

2006-12-22 08:55:47 -08:00

slab.c

[PATCH] slab: use parameter passed to cache_reap to determine pointer to work structure

2007-02-11 10:51:17 -08:00

slob.c

[PATCH] MM: SLOB is broken by recent cleanup of slab.h

2006-12-30 10:56:42 -08:00

sparse.c

…

swap_state.c

…

swap.c

[PATCH] hotplug CPU: clean up hotcpu_notifier() use

2006-12-07 08:39:39 -08:00

swapfile.c

[PATCH] swsusp: Do not fail if resume device is not set

2007-01-05 23:55:22 -08:00

thrash.c

…

tiny-shmem.c

[PATCH] struct path: convert mm

2006-12-08 08:28:47 -08:00

truncate.c

[PATCH] MM: Remove [PATCH] invalidate_inode_pages2_range() debug

2007-01-26 13:51:00 -08:00

util.c

…

vmalloc.c

…

vmscan.c

[PATCH] shrink_all_memory(): fix lru_pages handling

2007-01-05 23:55:29 -08:00

vmstat.c

[PATCH] /proc/zoneinfo: fix vm stats display

2007-02-11 10:51:17 -08:00