search for: hotcpu_notifier

vqs are freed in virtscsi_freeze but the hotcpu_notifier is not unregistered. We will have a use-after-free usage when the notifier callback is called after virtscsi_freeze. Signed-off-by: Asias He <asias at redhat.com> --- drivers/scsi/virtio_scsi.c | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/drivers/scsi/...

vqs are freed in virtscsi_freeze but the hotcpu_notifier is not unregistered. We will have a use-after-free usage when the notifier callback is called after virtscsi_freeze. Signed-off-by: Asias He <asias at redhat.com> --- drivers/scsi/virtio_scsi.c | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/drivers/scsi/...

Jason Wang <jasowang at redhat.com> writes: > On 10/28/2013 04:01 PM, Asias He wrote: >> vqs are freed in virtscsi_freeze but the hotcpu_notifier is not >> unregistered. We will have a use-after-free usage when the notifier >> callback is called after virtscsi_freeze. >> >> Signed-off-by: Asias He <asias at redhat.com> Please include a Fixes: line, especially if you want the CC: stable. Thanks, Rusty. >&g...

Jason Wang <jasowang at redhat.com> writes: > On 10/28/2013 04:01 PM, Asias He wrote: >> vqs are freed in virtscsi_freeze but the hotcpu_notifier is not >> unregistered. We will have a use-after-free usage when the notifier >> callback is called after virtscsi_freeze. >> >> Signed-off-by: Asias He <asias at redhat.com> Please include a Fixes: line, especially if you want the CC: stable. Thanks, Rusty. >&g...

From: Asias He <asias.hejun at gmail.com> vqs are freed in virtscsi_freeze but the hotcpu_notifier is not unregistered. We will have a use-after-free usage when the notifier callback is called after virtscsi_freeze. Fixes: 285e71ea6f3583a85e27cb2b9a7d8c35d4c0d558 ("virtio-scsi: reset virtqueue affinity when doing cpu hotplug") Cc: stable at vger.kernel.org Signed-off-by: Asias He &lt...

From: Asias He <asias.hejun at gmail.com> vqs are freed in virtscsi_freeze but the hotcpu_notifier is not unregistered. We will have a use-after-free usage when the notifier callback is called after virtscsi_freeze. Fixes: 285e71ea6f3583a85e27cb2b9a7d8c35d4c0d558 ("virtio-scsi: reset virtqueue affinity when doing cpu hotplug") Cc: stable at vger.kernel.org Signed-off-by: Asias He &lt...

On 10/28/2013 04:01 PM, Asias He wrote: > vqs are freed in virtscsi_freeze but the hotcpu_notifier is not > unregistered. We will have a use-after-free usage when the notifier > callback is called after virtscsi_freeze. > > Signed-off-by: Asias He <asias at redhat.com> > --- > drivers/scsi/virtio_scsi.c | 15 ++++++++++++++- > 1 file changed, 14 insertions(+), 1 delet...

...local_irq_enable(); refresh_cpu_vm_stats(cpu); } @@ -2819,6 +2869,12 @@ static int page_alloc_cpu_notify(struct void __init page_alloc_init(void) { +#if defined(CONFIG_PAGE_DISCARD_LIST) + int i; + + for_each_possible_cpu(i) + INIT_LIST_HEAD(&per_cpu(page_discard_list, i)); +#endif hotcpu_notifier(page_alloc_cpu_notify, 0); } diff -urpN linux-2.6/mm/vmscan.c linux-2.6-patched/mm/vmscan.c --- linux-2.6/mm/vmscan.c 2006-09-01 12:50:23.000000000 +0200 +++ linux-2.6-patched/mm/vmscan.c 2006-09-01 12:50:25.000000000 +0200 @@ -1034,6 +1034,9 @@ unsigned long try_to_free_pages(struct z sc.nr_...

...local_irq_enable(); refresh_cpu_vm_stats(cpu); } @@ -2819,6 +2869,12 @@ static int page_alloc_cpu_notify(struct void __init page_alloc_init(void) { +#if defined(CONFIG_PAGE_DISCARD_LIST) + int i; + + for_each_possible_cpu(i) + INIT_LIST_HEAD(&per_cpu(page_discard_list, i)); +#endif hotcpu_notifier(page_alloc_cpu_notify, 0); } diff -urpN linux-2.6/mm/vmscan.c linux-2.6-patched/mm/vmscan.c --- linux-2.6/mm/vmscan.c 2006-09-01 12:50:23.000000000 +0200 +++ linux-2.6-patched/mm/vmscan.c 2006-09-01 12:50:25.000000000 +0200 @@ -1034,6 +1034,9 @@ unsigned long try_to_free_pages(struct z sc.nr_...

Greetings, after Carsten pitched CMM2 on the kvm mini summit here is a repost of version 5 of the guest page hinting patches. The code is still the same but has been adapted to the latest git level. -- blue skies, Martin. "Reality continues to ruin my life." - Calvin.

Greetings, after Carsten pitched CMM2 on the kvm mini summit here is a repost of version 5 of the guest page hinting patches. The code is still the same but has been adapted to the latest git level. -- blue skies, Martin. "Reality continues to ruin my life." - Calvin.

After way to many months here is the fifth version of the guest page hinting patches. Compared to version four a few improvements have been added: - Avoid page_host_discards() calls outside of page-states.h - The discard list is now implemented via the page_free_discarded hook and architecture specific code. - PG_state_change page flag has been replaced with architecture specficic

After way to many months here is the fifth version of the guest page hinting patches. Compared to version four a few improvements have been added: - Avoid page_host_discards() calls outside of page-states.h - The discard list is now implemented via the page_free_discarded hook and architecture specific code. - PG_state_change page flag has been replaced with architecture specficic