Commit 62ba0c50 authored by Matthew Wilcox (Oracle)'s avatar Matthew Wilcox (Oracle) Committed by Cheng Yu
Browse files

ida: Fix crash in ida_free when the bitmap is empty

mainline inclusion
from mainline-v6.7-rc7
commit af73483f4e8b6f5c68c9aa63257bdd929a9c194a
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I8WBGZ
CVE: CVE-2023-6915

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=af73483f4e8b6f5c68c9aa63257bdd929a9c194a



--------------------------------

The IDA usually detects double-frees, but that detection failed to
consider the case when there are no nearby IDs allocated and so we have a
NULL bitmap rather than simply having a clear bit.  Add some tests to the
test-suite to be sure we don't inadvertently reintroduce this problem.
Unfortunately they're quite noisy so include a message to disregard
the warnings.

Reported-by: default avatarZhenghan Wang <wzhmmmmm@gmail.com>
Signed-off-by: default avatarMatthew Wilcox (Oracle) <willy@infradead.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: default avatarCheng Yu <serein.chengyu@huawei.com>
parent 26f718c6
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment