[PATCH] enforce proper tlb flush in unmap_hugepage_range
authorChen, Kenneth W <kenneth.w.chen@intel.com>
Wed, 4 Oct 2006 09:15:24 +0000 (02:15 -0700)
committerLinus Torvalds <torvalds@g5.osdl.org>
Wed, 4 Oct 2006 14:55:12 +0000 (07:55 -0700)
commitfe1668ae5bf0145014c71797febd9ad5670d5d05
treea1ad042a0c9b604653ca24645358fe31d1bbcfd6
parente80ee884ae0e3794ef2b65a18a767d502ad712ee
[PATCH] enforce proper tlb flush in unmap_hugepage_range

Spotted by Hugh that hugetlb page is free'ed back to global pool before
performing any TLB flush in unmap_hugepage_range().  This potentially allow
threads to abuse free-alloc race condition.

The generic tlb gather code is unsuitable to use by hugetlb, I just open
coded a page gathering list and delayed put_page until tlb flush is
performed.

Cc: Hugh Dickins <hugh@veritas.com>
Signed-off-by: Ken Chen <kenneth.w.chen@intel.com>
Acked-by: William Irwin <wli@holomorphy.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
mm/hugetlb.c