Gavin Shan 6dccdcbe2c mm: bootmem: fix checking the bitmap when finally freeing bootmem ... When bootmem releases an unaligned chunk of memory at the beginning of a node to the page allocator, it iterates from that unaligned PFN but checks an aligned word of the page bitmap. The checked bits do not correspond to the PFNs and, as a result, reserved pages can be freed. Properly shift the bitmap word so that the lowest bit corresponds to the starting PFN before entering the freeing loop. This bug has been around since commit 41546c1741 ("bootmem: clean up free_all_bootmem_core") (2.6.27) without known reports. Signed-off-by: Gavin Shan <shangw@linux.vnet.ibm.com> Signed-off-by: Johannes Weiner <hannes@cmpxchg.org> Acked-by: Tejun Heo <tj@kernel.org> Acked-by: David S. Miller <davem@davemloft.net> Cc: Yinghai Lu <yinghai@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2012-05-29 16:22:21 -07:00
..
backing-dev.c	backing-dev: fix wakeup timer races with bdi_unregister()	2012-02-01 16:52:49 +08:00
bootmem.c	mm: bootmem: fix checking the bitmap when finally freeing bootmem	2012-05-29 16:22:21 -07:00
bounce.c	mm: remove the second argument of k[un]map_atomic()	2012-03-20 21:48:27 +08:00
cleancache.c	mm: cleancache: Use __read_mostly as appropiate.	2012-01-23 16:08:09 -05:00
compaction.c	mm: mmzone: MIGRATE_CMA migration type added	2012-05-21 15:09:32 +02:00
debug-pagealloc.c	mm, x86: Remove debug_pagealloc_enabled	2011-12-06 09:24:07 +01:00
dmapool.c	mm: fix implicit stat.h usage in dmapool.c	2011-10-31 09:20:12 -04:00
fadvise.c	fadvise: only initiate writeback for specified range with FADV_DONTNEED	2012-01-10 16:30:43 -08:00
failslab.c	switch debugfs to umode_t	2012-01-03 22:54:56 -05:00
filemap_xip.c	mm/filemap_xip.c: fix race condition in xip_file_fault()	2012-02-03 16:16:41 -08:00
filemap.c	radix-tree: use iterators in find_get_pages* functions	2012-03-28 17:14:37 -07:00
fremap.c	mm: delete various needless include <linux/module.h>	2011-10-31 09:20:11 -04:00
highmem.c	Merge branch 'modsplit-Oct31_2011' of git://git.kernel.org/pub/scm/linux/kernel/git/paulg/linux	2011-11-06 19:44:47 -08:00
huge_memory.c	mm, thp: drop page_table_lock to uncharge memcg pages	2012-05-29 16:22:20 -07:00
hugetlb.c	mm/hugetlb.c: use long vars instead of int in region_count()	2012-05-29 16:22:18 -07:00
hwpoison-inject.c	HWPOISON: Clean up memory_failure() vs. __memory_failure()	2012-01-03 12:06:32 -08:00
init-mm.c	atomic: use <linux/atomic.h>	2011-07-26 16:49:47 -07:00
internal.h	mm: rename is_mlocked_vma() to mlocked_vma_newpage()	2012-05-29 16:22:20 -07:00
Kconfig	Cross Memory Attach: make it Kconfigurable	2012-05-29 16:22:20 -07:00
Kconfig.debug	mm: more intensive memory corruption debugging	2012-01-10 16:30:42 -08:00
kmemcheck.c
kmemleak-test.c	kmemleak: remove memset by using kzalloc	2011-01-27 18:31:51 +00:00
kmemleak.c	kmemleak: Disable early logging when kmemleak is off by default	2012-01-20 16:57:05 +00:00
ksm.c	ksm: cleanup: introduce find_mergeable_vma()	2012-03-21 17:54:59 -07:00
maccess.c	mm: Map most files to use export.h instead of module.h	2011-10-31 09:20:12 -04:00
madvise.c	coredump: add VM_NODUMP, MADV_NODUMP, MADV_CLEAR_NODUMP	2012-03-23 16:58:42 -07:00
Makefile	Cross Memory Attach: make it Kconfigurable	2012-05-29 16:22:20 -07:00
memblock.c	memblock: memblock should be able to handle zero length operations	2012-04-20 11:18:46 -07:00
memcontrol.c	mm: memcg: count pte references from every member of the reclaimed hierarchy	2012-05-29 16:22:20 -07:00
memory_hotplug.c	mm: print physical addresses consistently with other parts of kernel	2012-05-29 16:22:21 -07:00
memory-failure.c	mm/memory_failure: let the compiler add the function name	2012-05-29 16:22:18 -07:00
memory.c	thp, memcg: split hugepage for memcg oom on cow	2012-05-29 16:22:19 -07:00
mempolicy.c	mm: do_migrate_pages(): rename arguments	2012-05-29 16:22:20 -07:00
mempool.c	mempool: fix first round failure behavior	2012-01-10 16:30:45 -08:00
migrate.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2012-05-23 17:42:39 -07:00
mincore.c	mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode	2012-03-21 17:54:54 -07:00
mlock.c	vm: avoid using find_vma_prev() unnecessarily	2012-03-06 18:23:36 -08:00
mm_init.c	mm: Map most files to use export.h instead of module.h	2011-10-31 09:20:12 -04:00
mmap.c	mm/mmap.c: find_vma(): remove unnecessary if(mm) check	2012-05-29 16:22:19 -07:00
mmu_context.c	mm, counters: remove task argument to sync_mm_rss() and __sync_task_rss_stat()	2012-03-21 17:54:59 -07:00
mmu_notifier.c	mm: Map most files to use export.h instead of module.h	2011-10-31 09:20:12 -04:00
mmzone.c	mm: delete various needless include <linux/module.h>	2011-10-31 09:20:11 -04:00
mprotect.c	Merge branch 'akpm' (Andrew's patch-bomb)	2012-03-22 09:04:48 -07:00
mremap.c	mm: collapse security_vm_enough_memory() variants into a single function	2012-02-14 10:45:39 +11:00
msync.c
nobootmem.c	mm: nobootmem: fix sign extend problem in __free_pages_memory()	2012-05-10 15:06:44 -07:00
nommu.c	kill mm argument of vm_munmap()	2012-04-21 01:58:20 -04:00
oom_kill.c	userns: Store uid and gid values in struct cred with kuid_t and kgid_t types	2012-05-03 03:28:38 -07:00
page_alloc.c	mm/page_alloc.c: remove pageblock_default_order()	2012-05-29 16:22:21 -07:00
page_cgroup.c	page_cgroup: fix horrid swap accounting regression	2012-03-06 08:18:23 -08:00
page_io.c	block: kill off REQ_UNPLUG	2011-03-10 08:52:27 +01:00
page_isolation.c	mm: page_isolation: MIGRATE_CMA isolation functions added	2012-05-21 15:09:33 +02:00
page-writeback.c	writeback: initialize global_dirty_limit	2012-05-06 13:41:58 +08:00
pagewalk.c	mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode	2012-03-21 17:54:54 -07:00
percpu-km.c
percpu-vm.c	percpu: use bitmap_clear	2012-01-20 09:23:16 -08:00
percpu.c	kmemleak: Fix the kmemleak tracking of the percpu areas with !SMP	2012-05-09 10:13:29 -07:00
pgtable-generic.c	arch/tile: allow building Linux with transparent huge pages enabled	2012-05-25 12:48:21 -04:00
prio_tree.c	sanitize <linux/prefetch.h> usage	2011-05-20 12:50:29 -07:00
process_vm_access.c	Fix race in process_vm_rw_core	2012-02-02 12:55:17 -08:00
quicklist.c	mm: delete various needless include <linux/module.h>	2011-10-31 09:20:11 -04:00
readahead.c	mm: Map most files to use export.h instead of module.h	2011-10-31 09:20:12 -04:00
rmap.c	mm: remove swap token code	2012-05-29 16:22:19 -07:00
shmem.c	avoid iput() from flusher thread	2012-05-28 09:54:45 -07:00
slab.c	Merge branch 'slab/for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/penberg/linux	2012-03-28 15:04:26 -07:00
slob.c	mm: Map most files to use export.h instead of module.h	2011-10-31 09:20:12 -04:00
slub.c	slub: missing test for partial pages flush work in flush_all()	2012-05-17 18:00:51 -07:00
sparse-vmemmap.c	mm: delete various needless include <linux/module.h>	2011-10-31 09:20:11 -04:00
sparse.c	bootmem/sparsemem: remove limit constraint in alloc_bootmem_section	2012-03-21 17:54:58 -07:00
swap_state.c	mm: fix s390 BUG by __set_page_dirty_no_writeback on swap	2012-04-23 18:19:22 -07:00
swap.c	mm: drain percpu lru add/rotate page-vectors on cpu hot-unplug	2012-03-21 17:54:58 -07:00
swapfile.c	swapon: check validity of swap_flags	2012-03-28 17:14:35 -07:00
truncate.c	mm for fs: add truncate_pagecache_range()	2012-03-28 17:14:35 -07:00
util.c	procfs: mark thread stack correctly in proc/<pid>/maps	2012-03-21 17:54:58 -07:00
vmalloc.c	mm: use kcalloc() instead of kzalloc() to allocate array	2012-05-29 16:22:19 -07:00
vmscan.c	mm: rename is_mlocked_vma() to mlocked_vma_newpage()	2012-05-29 16:22:20 -07:00
vmstat.c	mm/vmstat.c: remove debug fs entries on failure of file creation and made extfrag_debug_root dentry local	2012-05-29 16:22:19 -07:00