Commit b8e57efa authored by Kirill Tkhai's avatar Kirill Tkhai Committed by Greg Kroah-Hartman

mm/vmscan.c: fix int overflow in callers of do_shrink_slab()

do_shrink_slab() returns unsigned long value, and the placing into int
variable cuts high bytes off.  Then we compare ret and 0xfffffffe (since
SHRINK_EMPTY is converted to ret type).

Thus a large number of objects returned by do_shrink_slab() may be
interpreted as SHRINK_EMPTY, if low bytes of their value are equal to
0xfffffffe.  Fix that by declaration ret as unsigned long in these
functions.

Link: http://lkml.kernel.org/r/153813407177.17544.14888305435570723973.stgit@localhost.localdomainSigned-off-by: default avatarKirill Tkhai <ktkhai@virtuozzo.com>
Reported-by: default avatarCyrill Gorcunov <gorcunov@openvz.org>
Acked-by: default avatarCyrill Gorcunov <gorcunov@openvz.org>
Reviewed-by: default avatarJosef Bacik <josef@toxicpanda.com>
Cc: Michal Hocko <mhocko@suse.com>
Cc: Andrey Ryabinin <aryabinin@virtuozzo.com>
Cc: Johannes Weiner <hannes@cmpxchg.org>
Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Cc: Shakeel Butt <shakeelb@google.com>
Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 58bc4c34
...@@ -580,8 +580,8 @@ static unsigned long shrink_slab_memcg(gfp_t gfp_mask, int nid, ...@@ -580,8 +580,8 @@ static unsigned long shrink_slab_memcg(gfp_t gfp_mask, int nid,
struct mem_cgroup *memcg, int priority) struct mem_cgroup *memcg, int priority)
{ {
struct memcg_shrinker_map *map; struct memcg_shrinker_map *map;
unsigned long freed = 0; unsigned long ret, freed = 0;
int ret, i; int i;
if (!memcg_kmem_enabled() || !mem_cgroup_online(memcg)) if (!memcg_kmem_enabled() || !mem_cgroup_online(memcg))
return 0; return 0;
...@@ -677,9 +677,8 @@ static unsigned long shrink_slab(gfp_t gfp_mask, int nid, ...@@ -677,9 +677,8 @@ static unsigned long shrink_slab(gfp_t gfp_mask, int nid,
struct mem_cgroup *memcg, struct mem_cgroup *memcg,
int priority) int priority)
{ {
unsigned long ret, freed = 0;
struct shrinker *shrinker; struct shrinker *shrinker;
unsigned long freed = 0;
int ret;
if (!mem_cgroup_is_root(memcg)) if (!mem_cgroup_is_root(memcg))
return shrink_slab_memcg(gfp_mask, nid, memcg, priority); return shrink_slab_memcg(gfp_mask, nid, memcg, priority);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment