Files
linux/mm
Alexander Potapenko 37984225b9 mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations
[ Upstream commit 0f181f9fbe ]

slab_alloc_node() already zeroed out the freelist pointer if
init_on_free was on.  Thibaut Sautereau noticed that the same needs to
be done for kmem_cache_alloc_bulk(), which performs the allocations
separately.

kmem_cache_alloc_bulk() is currently used in two places in the kernel,
so this change is unlikely to have a major performance impact.

SLAB doesn't require a similar change, as auto-initialization makes the
allocator store the freelist pointers off-slab.

Link: http://lkml.kernel.org/r/20191007091605.30530-1-glider@google.com
Fixes: 6471384af2 ("mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options")
Signed-off-by: Alexander Potapenko <glider@google.com>
Reported-by: Thibaut Sautereau <thibaut@sautereau.fr>
Reported-by: Kees Cook <keescook@chromium.org>
Cc: Christoph Lameter <cl@linux.com>
Cc: Laura Abbott <labbott@redhat.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-11-29 10:08:22 +01:00
..
2019-10-05 15:12:34 +02:00
2019-07-16 19:23:25 -07:00
2019-07-16 19:23:25 -07:00
2019-08-03 07:02:01 -07:00
2019-07-16 19:23:21 -07:00
2018-06-07 17:34:36 -07:00
2019-10-11 18:36:08 +02:00