Re: mm: NULL ptr deref in migrate_page_move_mapping

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



2014-09-27 7:02 GMT+04:00 Sasha Levin <sasha.levin@xxxxxxxxxx>:
> On 09/22/2014 07:04 PM, Hugh Dickins wrote:
>>> but I'm not sure what went wrong.
>> Most likely would be a zeroing of the radix_tree node, just as you
>> were experiencing zeroing of other mm structures in earlier weeks.
>>
>> Not that I've got any suggestions on where to take it from there.
>
> I've added poisoning to a few mm related structures, and managed to
> confirm that the issue here is indeed corruption rather than something
> specific with the given structures.
>
> Right now I'm looking into making KASan (Cc Andrey) to mark the poison
> bytes somehow so it would trigger an error on access, that way we'll
> know what's corruption them.
>
> Andrey, since it takes a while to trigger this corruption, could you
> confirm that if I kasan_poison_shadow() a few bytes I will get a KASan
> report on any read/write to them?
>

That's right. Note that poison value has to be negative.
Address and size of poisoned area has to be aligned to 8 bytes.

-- 
Best regards,
Andrey Ryabinin

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@xxxxxxxxx.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>




[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]