diff options
author | 2017-11-14 01:03:44 +0100 | |
---|---|---|
committer | 2017-11-15 13:12:08 -0800 | |
commit | 373c4557d2aa362702c4c2d41288fb1e54990b7c (patch) | |
tree | 4dd47b260e9210d3da7bb3408d70a459f9467a59 /fs/isofs | |
parent | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next (diff) | |
download | linux-373c4557d2aa362702c4c2d41288fb1e54990b7c.tar.gz linux-373c4557d2aa362702c4c2d41288fb1e54990b7c.tar.bz2 linux-373c4557d2aa362702c4c2d41288fb1e54990b7c.zip |
mm/pagewalk.c: report holes in hugetlb ranges
This matters at least for the mincore syscall, which will otherwise copy
uninitialized memory from the page allocator to userspace. It is
probably also a correctness error for /proc/$pid/pagemap, but I haven't
tested that.
Removing the `walk->hugetlb_entry` condition in walk_hugetlb_range() has
no effect because the caller already checks for that.
This only reports holes in hugetlb ranges to callers who have specified
a hugetlb_entry callback.
This issue was found using an AFL-based fuzzer.
v2:
- don't crash on ->pte_hole==NULL (Andrew Morton)
- add Cc stable (Andrew Morton)
Fixes: 1e25a271c8ac ("mincore: apply page table walker on do_mincore()")
Signed-off-by: Jann Horn <jannh@google.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'fs/isofs')
0 files changed, 0 insertions, 0 deletions