Re: mm: use-after-free in zap_page_range

From: Andrea Arcangeli
Date: Fri Mar 03 2017 - 11:25:07 EST


Hello Dmitry,

On Fri, Mar 03, 2017 at 02:54:26PM +0100, Dmitry Vyukov wrote:
> The following program triggers use-after-free in zap_page_range:
> https://gist.githubusercontent.com/dvyukov/b59dfbaa0cb1e5231094d228fa57c9bd/raw/95c4da18cb96f8aaa47c10012d8c4484fd5917ad/gistfile1.txt

I posted the fix for this one yesterday (found while doing more code
reviews of the upstream code searching for any other potential issue):

https://www.spinics.net/lists/linux-mm/msg122905.html
https://www.spinics.net/lists/linux-mm/msg122903.html

Could you test with those two applied on top of the others updates
that are already in -mm?

Thanks!
Andrea