Kirill A. Shutemov efcbc94afe mm: avoid setting up anonymous pages into file mapping ...

commit 6b7339f4c31ad69c8e9c0b2859276e22cf72176d upstream.

Reading page fault handler code I've noticed that under right
circumstances kernel would map anonymous pages into file mappings: if
the VMA doesn't have vm_ops->fault() and the VMA wasn't fully populated
on ->mmap(), kernel would handle page fault to not populated pte with
do_anonymous_page().

Let's change page fault handler to use do_anonymous_page() only on
anonymous VMA (->vm_ops == NULL) and make sure that the VMA is not
shared.

For file mappings without vm_ops->fault() or shred VMA without vm_ops,
page fault on pte_none() entry would lead to SIGBUS.

Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
Acked-by: Oleg Nesterov <oleg@redhat.com>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Willy Tarreau <w@1wt.eu>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-08-10 12:20:29 -07:00

..

backing-dev.c

bdi: avoid oops on device removal

2014-04-26 17:15:35 -07:00

balloon_compaction.c

…

bootmem.c

…

bounce.c

mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored

2013-10-13 16:08:33 -07:00

cleancache.c

…

compaction.c

mm/compaction: fix wrong order check in compact_finished()

2015-03-18 13:22:28 +01:00

debug-pagealloc.c

…

dmapool.c

…

fadvise.c

…

failslab.c

…

filemap_xip.c

…

filemap.c

mm: memcg: handle non-error OOM situations more gracefully

2014-11-21 09:22:56 -08:00

fremap.c

mm: fix use-after-free in sys_remap_file_pages

2014-01-09 12:24:24 -08:00

frontswap.c

mm: frontswap: invalidate expired data on a dup-store failure

2014-12-16 09:09:41 -08:00

highmem.c

…

huge_memory.c

mm: numa: Do not mark PTEs pte_numa when splitting huge pages

2014-10-09 12:18:42 -07:00

hugetlb_cgroup.c

…

hugetlb.c

mm/hugetlb: add migration entry check in __unmap_hugepage_range

2015-03-18 13:22:27 +01:00

hwpoison-inject.c

…

init-mm.c

…

internal.h

…

interval_tree.c

…

Kconfig

…

Kconfig.debug

…

kmemcheck.c

…

kmemleak-test.c

…

kmemleak.c

…

ksm.c

vm: add VM_FAULT_SIGSEGV handling support

2015-04-29 10:34:00 +02:00

maccess.c

…

madvise.c

…

Makefile

…

memblock.c

…

memcontrol.c

mm: memcg: handle non-error OOM situations more gracefully

2014-11-21 09:22:56 -08:00

memory_hotplug.c

mm/memory_hotplug.c: set zone->wait_table to null after freeing it

2015-06-22 16:55:54 -07:00

memory-failure.c

mm/memory-failure: call shake_page() when error hits thp tail page

2015-05-17 09:51:32 -07:00

memory.c

mm: avoid setting up anonymous pages into file mapping

2015-08-10 12:20:29 -07:00

mempolicy.c

cpuset,mempolicy: fix sleeping function called from invalid context

2014-07-17 15:58:00 -07:00

mempool.c

…

migrate.c

mm: numa: avoid unnecessary work on the failure path

2014-01-09 12:24:23 -08:00

mincore.c

…

mlock.c

mm: try_to_unmap_cluster() should lock_page() before mlocking

2014-05-06 07:55:32 -07:00

mm_init.c

…

mmap.c

mm/mmap.c: fix arithmetic overflow in __vm_enough_memory()

2015-03-18 13:22:27 +01:00

mmu_context.c

…

mmu_notifier.c

…

mmzone.c

…

mprotect.c

mm: fix TLB flush race between migration, and change_protection_range

2014-01-09 12:24:23 -08:00

mremap.c

mm, thp: close race between mremap() and split_huge_page()

2014-06-07 13:25:31 -07:00

msync.c

…

nobootmem.c

…

nommu.c

mm/nommu.c: fix arithmetic overflow in __vm_enough_memory()

2015-03-18 13:22:28 +01:00

oom_kill.c

mm: memcg: handle non-error OOM situations more gracefully

2014-11-21 09:22:56 -08:00

page_alloc.c

OOM, PM: OOM killed task shouldn't escape PM suspend

2014-11-14 08:47:58 -08:00

page_cgroup.c

cgroup/kmemleak: add kmemleak_free() for cgroup deallocations.

2014-11-14 08:47:59 -08:00

page_io.c

…

page_isolation.c

…

page-writeback.c

writeback: fix possible underflow in write bandwidth calculation

2015-04-19 10:10:48 +02:00

pagewalk.c

mm: pagewalk: call pte_hole() for VM_PFNMAP during walk_page_range

2015-02-11 14:48:16 +08:00

percpu-km.c

…

percpu-vm.c

percpu: perform tlb flush after pcpu_map_pages() failure

2014-10-05 14:54:13 -07:00

percpu.c

Revert "percpu: free percpu allocation info for uniprocessor system"

2014-11-14 08:47:53 -08:00

pgtable-generic.c

mm: fix TLB flush race between migration, and change_protection_range

2014-01-09 12:24:23 -08:00

process_vm_access.c

…

quicklist.c

…

readahead.c

…

rmap.c

mm: fix sleeping function warning from __put_anon_vma

2014-06-30 20:09:42 -07:00

shmem.c

shmem: fix nlink for rename overwrite directory

2014-10-05 14:54:11 -07:00

slab_common.c

slab_common: fix the check for duplicate slab names

2014-07-31 12:53:50 -07:00

slab.c

…

slab.h

memcg: check that kmem_cache has memcg_params before accessing it

2013-09-07 22:09:58 -07:00

slob.c

…

slub.c

slub: Fix calculation of cpu slabs

2014-02-13 13:48:00 -08:00

sparse-vmemmap.c

…

sparse.c

…

swap_state.c

…

swap.c

mm: close PageTail race

2014-04-03 12:01:05 -07:00

swapfile.c

…

truncate.c

mm: Remove false WARN_ON from pagecache_isize_extended()

2014-11-14 08:48:00 -08:00

util.c

vm_is_stack: use for_each_thread() rather then buggy while_each_thread()

2014-10-05 14:54:16 -07:00

vmalloc.c

mm/vmalloc.c: fix an overflow bug in alloc_vmap_area()

2013-11-13 12:05:34 +09:00

vmpressure.c

…

vmscan.c

mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed

2015-01-16 06:59:03 -08:00

vmstat.c

mm: numa: return the number of base pages altered by protection changes

2013-12-08 07:29:27 -08:00