It also does need this patch:

http://www.gossamer-threads.com/lists/linux/kernel/954043#954043
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.1

commit a6b79bb88e6682d2739aa5b4db7184038bbb32ce
Author: Linus Torvalds <[EMAIL PROTECTED]>
Date:   Wed Jul 30 22:20:18 2008 +0000

    Fix off-by-one error in iov_iter_advance()
    
    commit 94ad374a0751f40d25e22e036c37f7263569d24c upstream
    
    The iov_iter_advance() function would look at the iov->iov_len entry
    even though it might have iterated over the whole array, and iov was
    pointing past the end.  This would cause DEBUG_PAGEALLOC to trigger a
    kernel page fault if the allocation was at the end of a page, and the
    next page was unallocated.
    
    The quick fix is to just change the order of the tests: check that there
    is any iovec data left before we check the iov entry itself.
    
    Thanks to Alexey Dobriyan for finding this case, and testing the fix.
    
    Reported-and-tested-by: Alexey Dobriyan <[EMAIL PROTECTED]>
    Cc: Nick Piggin <[EMAIL PROTECTED]>
    Cc: Andrew Morton <[EMAIL PROTECTED]>
    Signed-off-by: Linus Torvalds <[EMAIL PROTECTED]>
    Signed-off-by: Greg Kroah-Hartman <[EMAIL PROTECTED]>

-- 
kernel crash in iov_iter_advance (caused by nfs-kernel-server)
https://bugs.launchpad.net/bugs/231746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to