Unverified Commit ee8c838b authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!8691 Fix page corruption caused by racy check in __free_pages 

Merge Pull Request from: @ci-robot 
 
PR sync from: Ze Zuo <zuoze1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/YKAA5PH6GNDMGFHXBZJZZFWJ5IYFON3V/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9R4KT 
 
Link:https://gitee.com/openeuler/kernel/pulls/8691

 

Reviewed-by: default avatarLiu YongQiang <liuyongqiang13@huawei.com>
Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
parents 44bbb358 aec6ce7e

mm/page_alloc.c

+4 −1
Original line number Diff line number Diff line
@@ -4877,9 +4877,12 @@ static inline void free_the_page(struct page *page, unsigned int order) 


void __free_pages(struct page *page, unsigned int order)

{

	/* get PageHead before we drop reference */

	int head = PageHead(page);



	if (put_page_testzero(page))

		free_the_page(page, order);

	else if (!PageHead(page))

	else if (!head)

		while (order-- > 0)

			free_the_page(page + (1 << order), order);

}