Andrey Ryabinin
00fb24a42a
mm/kasan: fix false positive invalid-free reports with CONFIG_KASAN_SW_TAGS=y ...
The code like this:
ptr = kmalloc(size, GFP_KERNEL);
page = virt_to_page(ptr);
offset = offset_in_page(ptr);
kfree(page_address(page) + offset);
may produce false-positive invalid-free reports on the kernel with
CONFIG_KASAN_SW_TAGS=y.
In the example above we lose the original tag assigned to 'ptr', so
kfree() gets the pointer with 0xFF tag. In kfree() we check that 0xFF
tag is different from the tag in shadow hence print false report.
Instead of just comparing tags, do the following:
1) Check that shadow doesn't contain KASAN_TAG_INVALID. Otherwise it's
double-free and it doesn't matter what tag the pointer have.
2) If pointer tag is different from 0xFF, make sure that tag in the
shadow is the same as in the pointer.
Link: http://lkml.kernel.org/r/20190819172540.19581-1-aryabinin@virtuozzo.com
Fixes: 7f94ffbc4c
2019-08-24 19:48:42 -07:00
mm/kasan: fix false positive invalid-free reports with CONFIG_KASAN_SW_TAGS=y
2019-08-24 19:48:42 -07:00
backing-dev: no need to check return value of debugfs_create functions
2019-06-03 15:49:07 +02:00
balloon: fix up comments
2019-07-22 11:19:26 -04:00
Driver Core and debugfs changes for 5.3-rc1
2019-07-12 12:24:03 -07:00
mm/cma.c: fail if fixed declaration can't be honored
2019-07-16 19:23:21 -07:00
mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
2019-05-14 09:47:45 -07:00
mm: compaction: avoid 100% CPU usage during compaction when a task is killed
2019-08-03 07:02:00 -07:00
mm: update references to page _refcount
2019-05-14 19:52:47 -07:00
mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options
2019-07-12 11:05:46 -07:00
mm/failslab.c: by default, do not fail allocations with direct reclaim only
2019-07-12 11:05:43 -07:00
mm/filemap.c: correct the comment about VM_FAULT_RETRY
2019-07-12 11:05:43 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 482
2019-06-19 17:09:52 +02:00
mm: introduce ARCH_HAS_PTE_DEVMAP
2019-07-16 19:23:25 -07:00
mm/gup: replace get_user_pages_longterm() with FOLL_LONGTERM
2019-05-14 09:47:45 -07:00
mm/hmm: always return EBUSY for invalid ranges in hmm_range_{fault,snapshot}
2019-07-25 16:14:39 -03:00
mm, page_owner: handle THP splits correctly
2019-08-24 19:48:42 -07:00
hugetlbfs: fix hugetlb page migration/fault race causing SIGBUS
2019-08-13 16:06:53 -07:00
hwpoison-inject: no need to check return value of debugfs_create functions
2019-06-03 15:39:40 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 248
2019-06-19 17:09:08 +02:00
mm: introduce ARCH_HAS_PTE_DEVMAP
2019-07-16 19:23:25 -07:00
mm, debug_pagealloc: use a page type instead of page_ext flag
2019-07-12 11:05:43 -07:00
Revert "mm: page cache: store only head pages in i_pages"
2019-07-05 19:55:18 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
mm: kmemleak: disable early logging in case of error
2019-08-13 16:06:52 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 482
2019-06-19 17:09:52 +02:00
mm: memcg/slab: stop setting page->mem_cgroup pointer for slab pages
2019-07-12 11:05:44 -07:00
The main changes in this release include:
2019-07-18 11:51:00 -07:00
mm: remove MEMORY_DEVICE_PUBLIC support
2019-07-02 14:32:43 -03:00
memremap: move from kernel/ to mm/
2019-08-03 07:02:01 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
mm: memcontrol: flush percpu vmevents before releasing memcg
2019-08-24 19:48:42 -07:00
Revert "mm: page cache: store only head pages in i_pages"
2019-07-05 19:55:18 -07:00
HMM patches for 5.3
2019-07-14 19:42:11 -07:00
mm: thp: make transhuge_vma_suitable available for anonymous THP
2019-07-18 17:08:06 -07:00
mm/memory_hotplug.c: remove unneeded return for void function
2019-08-03 07:02:01 -07:00
Revert "mm, thp: restore node-local hugepage allocations"
2019-08-13 16:06:52 -07:00
mm/hmm: fix ZONE_DEVICE anon page mapping reuse
2019-08-13 16:06:52 -07:00
mm/migrate.c: initialize pud_entry in migrate_vma()
2019-08-03 07:02:01 -07:00
mm/mincore.c: fix race between swapoff and mincore
2019-07-12 11:05:43 -07:00
mm/mlock.c: change count_mm_mlocked_page_nr return type
2019-06-13 17:34:56 -10:00
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mm: mmu_gather: remove __tlb_reset_range() for force flush
2019-06-13 17:34:56 -10:00
mm/mmu_notifier: use hlist_add_head_rcu()
2019-07-12 11:05:46 -07:00
mm/mprotect.c: fix compilation warning because of unused 'mm' variable
2019-05-14 09:47:51 -07:00
mm/mmu_notifier: contextual information for event triggering invalidation
2019-05-14 09:47:49 -07:00
mm: fix the MAP_UNINITIALIZED flag
2019-07-16 19:23:21 -07:00
mm/oom_kill.c: remove redundant OOM score normalization in select_bad_process()
2019-07-12 11:05:47 -07:00
mm: remove the account_page_dirtied export
2019-07-12 11:05:42 -07:00
mm, page_alloc: move_freepages should not examine struct page of reserved memory
2019-08-24 19:48:42 -07:00
mm, debug_pagealloc: use a page type instead of page_ext flag
2019-07-12 11:05:43 -07:00
mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
2019-06-29 16:43:45 +08:00
mm, swap: use rbtree for swap_extent
2019-07-12 11:05:43 -07:00
mm/page_isolation.c: change the prototype of undo_isolate_page_range()
2019-07-12 11:05:43 -07:00
mm/page_owner: Simplify stack trace handling
2019-04-29 12:37:50 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 428
2019-06-05 17:37:16 +02:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mm/hmm: fix bad subpage pointer in try_to_unmap_one
2019-08-13 16:06:52 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441
2019-06-05 17:37:17 +02:00
Revert "Revert "mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask""
2019-08-13 16:06:52 -07:00
mm: maintain randomization of page free lists
2019-05-14 19:52:48 -07:00
mm: maintain randomization of page free lists
2019-05-14 19:52:48 -07:00
mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options
2019-07-12 11:05:46 -07:00
mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options
2019-07-12 11:05:46 -07:00
mm/slab_common.c: work around clang bug #42570
2019-07-16 19:23:21 -07:00
mm/slab: refactor common ksize KASAN logic into slab_common.c
2019-07-12 11:05:42 -07:00
mm: slub: Fix slab walking for init_on_free
2019-07-31 13:16:06 -07:00
mm/sparsemem: convert kmalloc_section_memmap() to populate_section_memmap()
2019-07-18 17:08:07 -07:00
mm/sparsemem: cleanup 'section number' data types
2019-07-18 17:08:07 -07:00
docs: admin-guide: move sysctl directory to it
2019-07-15 11:03:01 -03:00
mm/swap_state.c: simplify total_swapcache_pages() with get_swap_device()
2019-07-12 11:05:43 -07:00
mm, swap: use rbtree for swap_extent
2019-07-12 11:05:43 -07:00
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mm/usercopy: use memory range to be accessed for wraparound check
2019-08-13 16:06:52 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 499
2019-06-19 17:09:53 +02:00
mm: add account_locked_vm utility function
2019-07-16 19:23:25 -07:00
mm/vmalloc.c: fix percpu free VM area search criteria
2019-08-13 16:06:52 -07:00
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
mm, vmscan: do not special-case slab reclaim when watermarks are boosted
2019-08-13 16:06:53 -07:00
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
mm: workingset: fix vmstat counters for shadow nodes
2019-08-13 16:06:52 -07:00
mm/z3fold.c: fix race between migration and destruction
2019-08-24 19:48:42 -07:00
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
mm/zsmalloc.c: fix race condition in zs_destroy_pool
2019-08-24 19:48:42 -07:00
zswap: ignore debugfs_create_dir() return value
2019-06-03 15:39:39 +02:00
00fb24a42a