Nick Piggin d32ddd8f20 slob: fix memory corruption
Previously, it would be possible for prev->next to point to
&free_slob_pages, and thus we would try to move a list onto itself, and
bad things would happen.

It seems a bit hairy to be doing list operations with the list marker as
an entry, rather than a head, but...

this resolves the following crash:

  http://bugzilla.kernel.org/show_bug.cgi?id=9379

Signed-off-by: Nick Piggin <npiggin@suse.de>
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Acked-by: Matt Mackall <mpm@selenic.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-11-15 08:36:27 -08:00
..
2007-10-17 08:42:45 -07:00
2007-11-14 18:45:40 -08:00
2007-10-20 02:46:58 +02:00
2007-10-16 09:43:02 -07:00
2007-10-20 01:27:18 +02:00
2007-10-20 02:13:26 +02:00
2007-10-23 08:32:06 -07:00
2007-10-18 14:37:31 -07:00
2007-10-29 07:53:26 -07:00
2007-10-20 15:04:06 -07:00
2007-10-20 01:27:18 +02:00
2007-10-17 08:42:45 -07:00
2007-11-15 08:36:27 -08:00
2007-11-12 10:32:29 -08:00
2007-10-20 01:27:18 +02:00
2007-10-17 08:42:55 -07:00
2007-11-14 18:45:41 -08:00
2007-10-20 01:27:18 +02:00
2007-10-20 01:27:18 +02:00
2007-11-14 18:45:42 -08:00