Nick Piggin 41d5e5d73e [IA64] permon use-after-free fix ... Perfmon associates vmalloc()ed memory with a file descriptor, and installs a vma mapping that memory. Unfortunately, the vm_file field is not filled in, so processes with mappings to that memory do not prevent the file from being closed and the memory freed. This results in use-after-free bugs and multiple freeing of pages, etc. I saw this bug on an Altix on SLES9. Haven't reproduced upstream but it looks like the same issue is there. Signed-off-by: Nick Piggin <npiggin@suse.de> Cc: Stephane Eranian <eranian@hpl.hp.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Tony Luck <tony.luck@intel.com>		2007-03-06 14:49:52 -08:00
..
cpufreq	ACPI: replace kmalloc+memset with kzalloc	2006-12-20 16:54:54 -05:00
acpi-ext.c
acpi-processor.c
acpi.c	ACPI: IA64: react to acpi_table_parse() return value change	2007-02-16 22:07:36 -05:00
asm-offsets.c
audit.c
brl_emu.c
crash_dump.c	[IA64] kexec: Minor enhancement to includes in crash.c	2007-02-05 11:31:04 -08:00
crash.c	[PATCH] sysctl: remove insert_at_head from register_sysctl	2007-02-14 08:09:59 -08:00
cyclone.c
efi_stub.S
efi.c	[IA64] point saved_max_pfn to the max_pfn of the entire system	2007-03-06 14:47:54 -08:00
entry.h
entry.S	[IA64] Hook up getcpu system call for IA64	2007-02-05 16:56:36 -08:00
esi_stub.S
esi.c
fsys.S
gate-data.S
gate.lds.S
gate.S
head.S
ia64_ksyms.c	[IA64] Need export for csum_ipv6_magic	2006-12-07 13:18:57 -08:00
init_task.c
iosapic.c	[IA64] Clear IRQ affinity when unregistered	2007-02-05 14:09:51 -08:00
irq_ia64.c	[PATCH] Scheduled removal of SA_xxx interrupt flags fixups	2007-02-14 08:09:54 -08:00
irq_lsapic.c	[IA64] typename -> name conversion	2006-11-16 09:38:02 -08:00
irq.c	[PATCH] kexec: Avoid migration of already disabled irqs (ia64)	2007-02-03 11:26:06 -08:00
ivt.S
jprobes.S	[IA64] enable trap code on slot 1	2006-12-12 12:00:55 -08:00
kprobes.c	[IA64] kprobe clears qp bits for special instructions	2006-12-12 12:04:42 -08:00
machine_kexec.c	[IA64] Fix NULL-pointer dereference in ia64_machine_kexec()	2007-02-05 14:06:44 -08:00
machvec.c
Makefile	[IA64] CONFIG_KEXEC/CONFIG_CRASH_DUMP permutations	2006-12-12 10:11:00 -08:00
mca_asm.S
mca_drv_asm.S
mca_drv.c
mca_drv.h
mca.c	[IA64] CONFIG_KEXEC/CONFIG_CRASH_DUMP permutations	2006-12-12 10:11:00 -08:00
minstate.h
module.c
msi_ia64.c	[PATCH] irq: Remove set_native_irq_info	2007-02-26 10:34:07 -08:00
numa.c
pal.S
palinfo.c	Merge branch 'release' of master.kernel.org:/pub/scm/linux/kernel/git/aegl/linux-2.6	2006-12-07 15:39:22 -08:00
patch.c
perfmon_default_smpl.c
perfmon_generic.h
perfmon_itanium.h
perfmon_mckinley.h
perfmon_montecito.h	[IA64] sparse cleanups	2006-12-07 10:48:19 -08:00
perfmon.c	[IA64] permon use-after-free fix	2007-03-06 14:49:52 -08:00
process.c	[IA64] kexec: Move machine_shutdown from machine_kexec.c to process.c	2007-02-05 13:49:10 -08:00
ptrace.c	[IA64] find thread for user rbs address	2007-02-05 14:04:21 -08:00
relocate_kernel.S	[IA64] IA64 Kexec/kdump	2006-12-07 09:51:35 -08:00
sal.c	[PATCH] Dynamic kernel command-line: fixups	2007-02-12 09:48:39 -08:00
salinfo.c	[PATCH] mark struct file_operations const 2	2007-02-12 09:48:44 -08:00
semaphore.c
setup.c	[PATCH] Dynamic kernel command-line: ia64	2007-02-12 09:48:38 -08:00
sigframe.h
signal.c
smp.c	[PATCH] arch/ia64: ansify	2007-02-09 09:14:06 -08:00
smpboot.c	WorkQueue: Fix up arch-specific work items where possible	2006-12-05 19:36:26 +00:00
sys_ia64.c
time.c
topology.c	[PATCH] i386: change the 'no_control' field to 'hotpluggable' in the struct cpu	2006-12-07 02:14:10 +01:00
traps.c	[PATCH] Consolidate bust_spinlocks()	2007-02-11 10:51:34 -08:00
unaligned.c
uncached.c
unwind_decoder.c
unwind_i.h
unwind.c
vmlinux.lds.S	[PATCH] disable init/initramfs.c: architectures	2007-02-11 10:51:25 -08:00