Re: [patch] slub: fix per cpu kmem_cache_cpu array memory leak

From: Pekka Enberg
Date: Wed Jan 28 2009 - 03:58:19 EST


On Tue, 2009-01-27 at 18:59 -0800, David Rientjes wrote:
>> The per cpu array of kmem_cache_cpu structures accomodates
>> NR_KMEM_CACHE_CPU such structs.
>>
>> When this array overflows and a struct is allocated by kmalloc(), it may
>> have an address at the upper bound of this array. If this happens, it
>> does not get freed and the per cpu kmem_cache_cpu_free pointer will be out
>> of bounds after kmem_cache_destroy() or cpu offlining.
>>
>> Cc: Christoph Lameter <cl@xxxxxxxxxxxxxxxxxxxx>
>> Signed-off-by: David Rientjes <rientjes@xxxxxxxxxx>

On Wed, Jan 28, 2009 at 10:52 AM, Pekka Enberg <penberg@xxxxxxxxxxxxxx> wrote:
> Applied, thanks!

Btw, did you hit this bug during testing or did you just spot it
during review? That is, do we need to get this to -stable?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/