diff options
| author | Andrey Konovalov <andreyknvl@google.com> | 2019-02-20 22:19:32 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2019-02-21 09:01:00 -0800 |
| commit | d36a63a943e37081e92e4abdf4a207fd2e83a006 (patch) | |
| tree | 148469fb82f7151fc255e9b449e0ef4629b574ca /Documentation/xilinx | |
| parent | 18e506610238eda2b0c5a19a123d3d6ec0ab2de6 (diff) | |
| download | linux-d36a63a943e37081e92e4abdf4a207fd2e83a006.tar.gz linux-d36a63a943e37081e92e4abdf4a207fd2e83a006.tar.bz2 linux-d36a63a943e37081e92e4abdf4a207fd2e83a006.zip | |
kasan, slub: fix more conflicts with CONFIG_SLAB_FREELIST_HARDENED
When CONFIG_KASAN_SW_TAGS is enabled, ptr_addr might be tagged. Normally,
this doesn't cause any issues, as both set_freepointer() and
get_freepointer() are called with a pointer with the same tag. However,
there are some issues with CONFIG_SLUB_DEBUG code. For example, when
__free_slub() iterates over objects in a cache, it passes untagged
pointers to check_object(). check_object() in turns calls
get_freepointer() with an untagged pointer, which causes the freepointer
to be restored incorrectly.
Add kasan_reset_tag to freelist_ptr(). Also add a detailed comment.
Link: http://lkml.kernel.org/r/bf858f26ef32eb7bd24c665755b3aee4bc58d0e4.1550103861.git.andreyknvl@google.com
Signed-off-by: Andrey Konovalov <andreyknvl@google.com>
Reported-by: Qian Cai <cai@lca.pw>
Tested-by: Qian Cai <cai@lca.pw>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Alexander Potapenko <glider@google.com>
Cc: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'Documentation/xilinx')
0 files changed, 0 insertions, 0 deletions