Markus Metzger 9f339e7028 x86, ptrace, mm: fix double-free on race ...

Ptrace_detach() races with __ptrace_unlink() if the traced task is
reaped while detaching. This might cause a double-free of the BTS
buffer.

Change the ptrace_detach() path to only do the memory accounting in
ptrace_bts_detach() and leave the buffer free to ptrace_bts_untrace()
which will be called from __ptrace_unlink().

The fix follows a proposal from Oleg Nesterov.

Reported-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Markus Metzger <markus.t.metzger@intel.com>
Signed-off-by: Ingo Molnar <mingo@elte.hu>

2009-02-11 15:44:20 +01:00

..

allocpercpu.c

mm/allocpercpu.c: make 4 functions static

2008-07-26 12:00:12 -07:00

backing-dev.c

Merge branch 'core-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip

2009-01-06 17:10:04 -08:00

bootmem.c

bootmem: print request details before BUG_ON(them)

2009-01-06 15:59:10 -08:00

bounce.c

bounce: don't rely on a zeroed bio_vec list

2008-12-29 08:29:52 +01:00

dmapool.c

dmapool: enable debugging for CONFIG_SLUB_DEBUG_ON too

2008-04-28 08:58:20 -07:00

fadvise.c

[CVE-2009-0029] System call wrapper special cases

2009-01-14 14:15:18 +01:00

failslab.c

SLUB: failslab support

2008-12-29 11:27:46 +02:00

filemap_xip.c

badpage: remove vma from page_remove_rmap

2009-01-06 15:59:07 -08:00

filemap.c

[CVE-2009-0029] System call wrapper special cases

2009-01-14 14:15:18 +01:00

fremap.c

[CVE-2009-0029] System call wrappers part 13

2009-01-14 14:15:23 +01:00

highmem.c

x86, pat: avoid highmem cache attribute aliasing

2008-08-15 17:22:57 +02:00

hugetlb.c

mm: hugetlb: remove redundant `if' operation

2009-01-06 15:59:10 -08:00

internal.h

mm: make get_user_pages() interruptible

2009-01-06 15:59:08 -08:00

Kconfig

Remove obsolete CONFIG_RESOURCES_64BIT

2009-01-06 15:59:14 -08:00

maccess.c

kgdb: fix optional arch functions and probe_kernel_*

2008-04-17 20:05:39 +02:00

madvise.c

[CVE-2009-0029] System call wrappers part 14

2009-01-14 14:15:24 +01:00

Makefile

shmem: unify regular and tiny shmem

2009-01-06 15:59:08 -08:00

memcontrol.c

memcg: NULL pointer dereference at rmdir on some NUMA systems

2009-01-29 18:04:44 -08:00

memory_hotplug.c

mm: remove GFP_HIGHUSER_PAGECACHE

2009-01-06 15:59:01 -08:00

memory.c

x86 PAT: change track_pfn_vma_new to take pgprot_t pointer param

2009-01-13 19:13:01 +01:00

mempolicy.c

[CVE-2009-0029] System call wrappers part 28

2009-01-14 14:15:30 +01:00

mempool.c

spelling fixes: mm/

2007-10-20 01:27:18 +02:00

migrate.c

[CVE-2009-0029] System call wrappers part 28

2009-01-14 14:15:30 +01:00

mincore.c

[CVE-2009-0029] System call wrappers part 14

2009-01-14 14:15:24 +01:00

mlock.c

x86, ptrace, mm: fix double-free on race

2009-02-11 15:44:20 +01:00

mm_init.c

mm: mminit_loglevel cannot be __meminitdata anymore

2008-08-20 15:40:30 -07:00

mmap.c

Stop playing silly games with the VM_ACCOUNT flag

2009-01-31 15:08:56 -08:00

mmu_notifier.c

mmu-notifiers: core

2008-07-28 16:30:21 -07:00

mmzone.c

mm: mark the correct zone as full when scanning zonelists

2008-09-13 14:41:52 -07:00

mprotect.c

[CVE-2009-0029] System call wrappers part 13

2009-01-14 14:15:23 +01:00

mremap.c

[CVE-2009-0029] System call wrappers part 13

2009-01-14 14:15:23 +01:00

msync.c

[CVE-2009-0029] System call wrappers part 13

2009-01-14 14:15:23 +01:00

nommu.c

uclinux: add process name to allocation error message

2009-01-27 16:42:03 +10:00

oom_kill.c

memcg: avoid deadlock caused by race between oom and cpuset_attach

2009-01-08 08:31:09 -08:00

page_alloc.c

mm: introduce zone_reclaim struct

2009-01-08 08:31:07 -08:00

page_cgroup.c

memcg: add mem_cgroup_disabled()

2009-01-08 08:31:05 -08:00

page_io.c

mm: try_to_free_swap replaces remove_exclusive_swap_page

2009-01-06 15:59:03 -08:00

page_isolation.c

memory hotplug: fix page_zone() calculation in test_pages_isolated()

2008-11-06 15:41:19 -08:00

page-writeback.c

mm: add dirty_background_bytes and dirty_bytes sysctls

2009-01-06 15:59:03 -08:00

pagewalk.c

pagemap: pass mm into pagewalkers

2008-06-12 18:05:41 -07:00

pdflush.c

cpumask: convert mm/

2009-01-01 10:12:29 +10:30

prio_tree.c

spelling fixes: mm/

2007-10-20 01:27:18 +02:00

quicklist.c

mm: size of quicklists shouldn't be proportional to the number of CPUs

2008-09-02 19:21:38 -07:00

readahead.c

vmscan: split LRU lists into anon & file sets

2008-10-20 08:50:25 -07:00

rmap.c

badpage: remove vma from page_remove_rmap

2009-01-06 15:59:07 -08:00

shmem_acl.c

[PATCH] sanitize ->permission() prototype

2008-07-26 20:53:14 -04:00

shmem.c

Stop playing silly games with the VM_ACCOUNT flag

2009-01-31 15:08:56 -08:00

slab.c

cpumask: convert mm/

2009-01-01 10:12:29 +10:30

slob.c

slob: do not pass the SLAB flags as GFP in kmem_cache_create()

2008-12-15 16:27:06 -08:00

slub.c

slub: fix per cpu kmem_cache_cpu array memory leak

2009-01-28 10:43:42 +02:00

sparse-vmemmap.c

vmemmap: warn about page_structs with remote distance

2008-11-06 15:41:19 -08:00

sparse.c

meminit section warnings

2008-11-30 10:03:35 -08:00

swap_state.c

memcg: mem+swap controller core

2009-01-08 08:31:05 -08:00

swap.c

memcg: add zone_reclaim_stat

2009-01-08 08:31:08 -08:00

swapfile.c

memcg: fix refcnt handling at swapoff

2009-01-29 18:04:43 -08:00

thrash.c

Bug in mm/thrash.c function grab_swap_token()

2007-05-11 08:29:32 -07:00

truncate.c

mmap: handle mlocked pages during map, remap, unmap

2008-10-20 08:52:31 -07:00

util.c

mm: Make generic weak get_user_pages_fast and EXPORT_GPL it

2008-08-12 17:52:53 +10:00

vmalloc.c

revert "mm: vmalloc use mutex for purge"

2009-01-15 16:39:40 -08:00

vmscan.c

memcg: fix calculation of active_ratio

2009-01-08 08:31:09 -08:00

vmstat.c

cpumask: convert mm/

2009-01-01 10:12:29 +10:30