From: Vitaly Mayatskikh Date: Fri, 22 Sep 2017 05:18:39 +0000 (-0400) Subject: fix unbalanced page refcounting in bio_map_user_iov X-Git-Tag: v4.14-rc6~13^2~4 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=95d78c28b5a85bacbc29b8dba7c04babb9b0d467;p=platform%2Fkernel%2Flinux-exynos.git fix unbalanced page refcounting in bio_map_user_iov bio_map_user_iov and bio_unmap_user do unbalanced pages refcounting if IO vector has small consecutive buffers belonging to the same page. bio_add_pc_page merges them into one, but the page reference is never dropped. Cc: stable@vger.kernel.org Signed-off-by: Vitaly Mayatskikh Signed-off-by: Al Viro --- diff --git a/block/bio.c b/block/bio.c index b38e962..0d6439e 100644 --- a/block/bio.c +++ b/block/bio.c @@ -1383,6 +1383,7 @@ struct bio *bio_map_user_iov(struct request_queue *q, offset = offset_in_page(uaddr); for (j = cur_page; j < page_limit; j++) { unsigned int bytes = PAGE_SIZE - offset; + unsigned short prev_bi_vcnt = bio->bi_vcnt; if (len <= 0) break; @@ -1397,6 +1398,13 @@ struct bio *bio_map_user_iov(struct request_queue *q, bytes) break; + /* + * check if vector was merged with previous + * drop page reference if needed + */ + if (bio->bi_vcnt == prev_bi_vcnt) + put_page(pages[j]); + len -= bytes; offset = 0; }