The patch titled
Subject: fix xarray
has been removed from the -mm tree. Its filename was
xarray-add-xas_split-fix-3patch.patch
This patch was dropped because it was folded into xarray-add-xas_split.patch
------------------------------------------------------
From: "Matthew Wilcox (Oracle)" <willy@xxxxxxxxxxxxx>
Subject: fix xarray
Testing today revealed a rather annoying bug where we can free an
initialised node back to the slab cache without zeroing it first. That
ends up creating a corrupted XArray ... whichever XArray happens to
allocate that node next.
Link: https://lkml.kernel.org/r/20201001233943.GW20115@xxxxxxxxxxxxxxxxxxxx
Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
---
lib/xarray.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
--- a/lib/xarray.c~xarray-add-xas_split-fix-3patch
+++ a/lib/xarray.c
@@ -271,8 +271,7 @@ static void xas_destroy(struct xa_state
while (node) {
XA_NODE_BUG_ON(node, !list_empty(&node->private_list));
next = rcu_dereference_raw(node->parent);
- /* XXX: need to free children */
- kmem_cache_free(radix_tree_node_cachep, node);
+ radix_tree_node_rcu_free(&node->rcu_head);
xas->xa_alloc = node = next;
}
}
_
Patches currently in -mm which might be from willy@xxxxxxxxxxxxx are
xarray-add-xa_get_order.patch
xarray-add-xas_split.patch
mm-filemap-fix-storing-to-a-thp-shadow-entry.patch
mm-filemap-fix-page-cache-removal-for-arbitrary-sized-thps.patch
mm-memory-remove-page-fault-assumption-of-compound-page-size.patch
mm-memory-remove-page-fault-assumption-of-compound-page-size-fix.patch
mm-page_owner-change-split_page_owner-to-take-a-count.patch
mm-huge_memory-fix-page_trans_huge_mapcount-assumption-of-thp-size.patch
mm-huge_memory-fix-can_split_huge_page-assumption-of-thp-size.patch
mm-rmap-fix-assumptions-of-thp-size.patch
mm-truncate-fix-truncation-for-pages-of-arbitrary-size.patch
mm-page-writeback-support-tail-pages-in-wait_for_stable_page.patch
mm-vmscan-allow-arbitrary-sized-pages-to-be-paged-out.patch
fs-add-a-filesystem-flag-for-thps.patch
fs-do-not-update-nr_thps-for-mappings-which-support-thps.patch
mm-readahead-add-define_readahead.patch
mm-readahead-make-page_cache_ra_unbounded-take-a-readahead_control.patch
mm-readahead-make-do_page_cache_ra-take-a-readahead_control.patch
mm-readahead-add-page_cache_sync_ra-and-page_cache_async_ra.patch
mm-rename-page_order-to-buddy_order.patch
ramfs-fix-nommu-mmap-with-gaps-in-the-page-cache.patch
harden-autofs-ioctl-table.patch
mm-update-the-documentation-for-vfree.patch
