Andy Lutomirski 9ab4233dd0 mm: Hold a file reference in madvise_remove ... Otherwise the code races with munmap (causing a use-after-free of the vma) or with close (causing a use-after-free of the struct file). The bug was introduced by commit 90ed52ebe4 ("[PATCH] holepunch: fix mmap_sem i_mutex deadlock") Cc: Hugh Dickins <hugh@veritas.com> Cc: Miklos Szeredi <mszeredi@suse.cz> Cc: Badari Pulavarty <pbadari@us.ibm.com> Cc: Nick Piggin <npiggin@suse.de> Cc: stable@vger.kernel.org Signed-off-by: Andy Lutomirski <luto@amacapital.net> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2012-07-06 10:34:38 -07:00
..
backing-dev.c
bootmem.c
bounce.c
cleancache.c	->encode_fh() API change	2012-05-29 23:28:33 -04:00
compaction.c	Revert "mm: compaction: handle incorrect MIGRATE_UNMOVABLE type pageblocks"	2012-06-03 20:05:57 -07:00
debug-pagealloc.c
dmapool.c
fadvise.c
failslab.c
filemap.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2012-06-01 10:34:35 -07:00
filemap_xip.c	fs: introduce inode operation ->update_time	2012-06-01 12:07:25 -04:00
fremap.c
frontswap.c
highmem.c
huge_memory.c	mm/memcg: apply add/del_page to lruvec	2012-05-29 16:22:28 -07:00
hugetlb.c	mm: fix vma_resv_map() NULL pointer	2012-05-30 08:48:13 -07:00
hwpoison-inject.c
init-mm.c
internal.h	Revert "mm: compaction: handle incorrect MIGRATE_UNMOVABLE type pageblocks"	2012-06-03 20:05:57 -07:00
Kconfig	Frontswap provides a "transcendent memory" interface for swap pages.	2012-06-04 12:28:45 -07:00
Kconfig.debug
kmemcheck.c
kmemleak-test.c
kmemleak.c
ksm.c
maccess.c
madvise.c	mm: Hold a file reference in madvise_remove	2012-07-06 10:34:38 -07:00
Makefile	Frontswap provides a "transcendent memory" interface for swap pages.	2012-06-04 12:28:45 -07:00
memblock.c	mm/memblock: fix overlapping allocation when doubling reserved array	2012-06-20 14:39:36 -07:00
memcontrol.c	mm: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
memory-failure.c
memory.c	mm/memory.c: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
memory_hotplug.c
mempolicy.c	mm, mempolicy: fix mbind() to do synchronous migration	2012-06-20 22:10:42 -07:00
mempool.c
migrate.c	mm: fix warning in __set_page_dirty_nobuffers	2012-06-03 20:05:47 -07:00
mincore.c
mlock.c
mm_init.c
mmap.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2012-06-01 10:34:35 -07:00
mmu_context.c
mmu_notifier.c
mmzone.c	mm: add link from struct lruvec to struct zone	2012-05-29 16:22:26 -07:00
mprotect.c
mremap.c	move security_mmap_addr() to saner place	2012-06-01 10:37:16 -04:00
msync.c
nobootmem.c
nommu.c	nommu: fix compilation of nommu.c	2012-06-04 17:17:31 -04:00
oom_kill.c	mm: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
page-writeback.c
page_alloc.c	Revert "mm: compaction: handle incorrect MIGRATE_UNMOVABLE type pageblocks"	2012-06-03 20:05:57 -07:00
page_cgroup.c	mm: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
page_io.c
page_isolation.c
pagewalk.c	mm: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
percpu-km.c
percpu-vm.c	mm: fix kernel-doc warnings	2012-06-20 14:39:36 -07:00
percpu.c
pgtable-generic.c
prio_tree.c
process_vm_access.c	aio/vfs: cleanup of rw_copy_check_uvector() and compat_rw_copy_check_uvector()	2012-05-31 17:49:32 -07:00
quicklist.c
readahead.c
rmap.c
shmem.c	Merge branch 'for-linus' of git://git.kernel.dk/linux-block	2012-07-03 15:45:10 -07:00
slab.c
slob.c
slub.c	Merge branch 'slab/for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/penberg/linux	2012-06-01 16:50:23 -07:00
sparse-vmemmap.c
sparse.c
swap.c	mm/memcg: apply add/del_page to lruvec	2012-05-29 16:22:28 -07:00
swap_state.c
swapfile.c	swap: fix shmem swapping when more than 8 areas	2012-06-15 21:48:14 -07:00
truncate.c
util.c	new helper: vm_mmap_pgoff()	2012-06-01 10:37:18 -04:00
vmalloc.c	mm: fix faulty initialization in vmalloc_init()	2012-05-29 16:22:24 -07:00
vmscan.c	mm/memcg: apply add/del_page to lruvec	2012-05-29 16:22:28 -07:00
vmstat.c