alistair23-linux/arch/ia64
Nick Piggin 41d5e5d73e [IA64] permon use-after-free fix
Perfmon associates vmalloc()ed memory with a file descriptor, and installs
a vma mapping that memory.  Unfortunately, the vm_file field is not filled
in, so processes with mappings to that memory do not prevent the file from
being closed and the memory freed.  This results in use-after-free bugs and
multiple freeing of pages, etc.

I saw this bug on an Altix on SLES9.  Haven't reproduced upstream but it
looks like the same issue is there.

Signed-off-by: Nick Piggin <npiggin@suse.de>
Cc: Stephane Eranian <eranian@hpl.hp.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Tony Luck <tony.luck@intel.com>
2007-03-06 14:49:52 -08:00
..
configs
dig
hp [PATCH] mark struct file_operations const 2 2007-02-12 09:48:44 -08:00
ia32 [IA64] sync compat getdents 2007-03-06 14:49:24 -08:00
kernel [IA64] permon use-after-free fix 2007-03-06 14:49:52 -08:00
lib [IA64] always build arch/ia64/lib/xor.o 2007-03-06 14:48:52 -08:00
mm [IA64] point saved_max_pfn to the max_pfn of the entire system 2007-03-06 14:47:54 -08:00
oprofile
pci [IA64] replace kmalloc+memset with kzalloc 2006-12-07 13:46:43 -08:00
scripts
sn [PATCH] irq: Remove set_native_irq_info 2007-02-26 10:34:07 -08:00
defconfig
install.sh
Kconfig ATA convert GSI to irq on ia64 2007-02-15 18:04:53 -05:00
Kconfig.debug
Makefile
module.lds