• Jens Axboe's avatar
    [PATCH] sys_swapon bad arg causing slab corruption · a1f846e8
    Jens Axboe authored
    There's an error in sys_swapon() that can cause slab corruption if you
    pass in a bad specialfile pointer. getname() then returns
    ERR_PTR(-EFAULT), but sys_swapon() doesn't clear name before calling
    putname() on it (thus freeing 0xfffffff2, corrupting slab). An ltp test
    case repeatedly crashed in later tests due to thus, irk.
    a1f846e8
swapfile.c 38.4 KB