tree a1ad042a0c9b604653ca24645358fe31d1bbcfd6
parent e80ee884ae0e3794ef2b65a18a767d502ad712ee
author Chen, Kenneth W <kenneth.w.chen@intel.com> 1159953324 -0700
committer Linus Torvalds <torvalds@g5.osdl.org> 1159973712 -0700

[PATCH] enforce proper tlb flush in unmap_hugepage_range

Spotted by Hugh that hugetlb page is free'ed back to global pool before
performing any TLB flush in unmap_hugepage_range().  This potentially allow
threads to abuse free-alloc race condition.

The generic tlb gather code is unsuitable to use by hugetlb, I just open
coded a page gathering list and delayed put_page until tlb flush is
performed.

Cc: Hugh Dickins <hugh@veritas.com>
Signed-off-by: Ken Chen <kenneth.w.chen@intel.com>
Acked-by: William Irwin <wli@holomorphy.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>