Tejun Heo 5e0bf19b7e idr: fix a critical misallocation bug, take#2 ... commit d2e7276b6b upstream. This is retry of reverted 859ddf0974 ("idr: fix a critical misallocation bug") which contained two bugs. * pa[idp->layers] should be cleared even if it's not used by sub_alloc() because it's used by mark idr_mark_full(). * The original condition check also assigned pa[l] to p which the new code didn't do thus leaving p pointing at the wrong layer. Both problems have been fixed and the idr code has received good amount testing using userland testing setup where simple bitmap allocator is run parallel to verify the result of idr allocation. The bug this patch fixes is caused by sub_alloc() optimization path bypassing out-of-room condition check and restarting allocation loop with starting value higher than maximum allowed value. For detailed description, please read commit message of 859ddf09. Signed-off-by: Tejun Heo <tj@kernel.org> Based-on-patch-from: Eric Paris <eparis@redhat.com> Reported-by: Eric Paris <eparis@redhat.com> Tested-by: Stefan Lippers-Hollmann <s.l-h@gmx.de> Tested-by: Serge Hallyn <serue@us.ibm.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2010-03-15 08:49:37 -07:00
..
lzo
reed_solomon
zlib_deflate	trivial: fix typo "to to" in multiple files	2009-09-21 15:14:55 +02:00
zlib_inflate	bzip2/lzma: library support for gzip, bzip2 and lzma decompression	2009-01-04 15:53:34 -08:00
.gitignore
argv_split.c
atomic64.c	lib: export generic atomic64_t functions	2009-07-29 19:10:35 -07:00
audit.c
bcd.c
bitmap.c	Make bitmask 'and' operators return a result code	2009-08-21 09:26:15 -07:00
bitrev.c
bug.c	allow bug table entries to use relative pointers (and use it on x86-64)	2008-12-16 18:40:32 +01:00
bust_spinlocks.c	oops handling: ensure that any oops is flushed to the mtdoops console	2009-01-06 15:59:11 -08:00
check_signature.c
checksum.c	lib/checksum.c: fix endianess bug	2009-06-19 14:58:13 +02:00
cmdline.c
cpumask.c	x86: remove some alloc_bootmem_cpumask_var calling	2009-06-11 19:27:07 +03:00
crc-ccitt.c
crc-itu-t.c
crc-t10dif.c
crc7.c
crc16.c
crc32.c
crc32defs.h
ctype.c
debug_locks.c	lockdep: warn about lockdep disabling after kernel taint	2009-04-12 16:10:51 +02:00
debugobjects.c	headers: remove sched.h from interrupt.h	2009-10-11 11:20:58 -07:00
dec_and_lock.c	atomic: only take lock when the counter drops to zero on UP as well	2009-06-16 19:47:47 -07:00
decompress.c	bzip2/lzma: don't stop search at first unconfigured compression	2009-02-19 13:36:55 -08:00
decompress_bunzip2.c	lib/decompress_*: only include <linux/slab.h> if STATIC is not defined	2009-08-07 10:39:56 -07:00
decompress_inflate.c	lzma/gzip: fix potential oops when input data is truncated	2009-09-24 07:21:05 -07:00
decompress_unlzma.c	lzma/gzip: fix potential oops when input data is truncated	2009-09-24 07:21:05 -07:00
devres.c
div64.c
dma-debug.c	dma-debug: allow DMA_BIDIRECTIONAL mappings to be synced with DMA_FROM_DEVICE and	2010-01-18 10:19:33 -08:00
dump_stack.c
dynamic_debug.c	Dynamic debug: fix typo: -/->	2009-07-28 13:45:22 -07:00
extable.c	module: trim exception table on init free.	2009-06-12 21:47:04 +09:30
fault-inject.c	headers: remove sched.h from interrupt.h	2009-10-11 11:20:58 -07:00
find_last_bit.c	bitmap: find_last_bit()	2009-01-01 10:12:19 +10:30
find_next_bit.c
flex_array.c	flex_array: add missing kerneldoc annotations	2009-09-22 07:17:47 -07:00
gcd.c	lib: add lib/gcd.c	2009-06-18 13:04:05 -07:00
gen_crc32table.c
genalloc.c	lib/genalloc.c: remove unmatched write_lock() in gen_pool_destroy	2009-06-16 19:47:53 -07:00
halfmd4.c
hexdump.c	hexdump: remove the trailing space	2009-06-16 19:47:51 -07:00
hweight.c
idr.c	idr: fix a critical misallocation bug, take#2	2010-03-15 08:49:37 -07:00
inflate.c	Nicolas Pitre has a new email address	2009-09-15 09:37:12 -07:00
int_sqrt.c
iomap.c
iomap_copy.c
iommu-helper.c	introduce generic iommu_num_pages function	2008-10-16 11:21:33 -07:00
ioremap.c
irq_regs.c
is_single_threaded.c	kernel: is_current_single_threaded: don't use ->mmap_sem	2009-07-17 09:11:31 +10:00
kasprintf.c
Kconfig	lib: Provide generic atomic64_t implementation	2009-06-15 13:27:38 +10:00
Kconfig.debug	powerpc: Minor cleanup to lib/Kconfig.debug	2009-10-27 16:42:42 +11:00
Kconfig.kgdb
Kconfig.kmemcheck	kmemcheck: depend on HAVE_ARCH_KMEMCHECK	2009-07-01 22:28:44 +02:00
kernel_lock.c	sched: TIF_NEED_RESCHED -> need_reshed() cleanup	2009-03-06 12:48:55 +01:00
klist.c	driver core: Remove completion from struct klist_node	2009-01-06 10:44:30 -08:00
kobject.c	kobject: make kset_create check kobject_set_name return value	2009-06-15 21:30:24 -07:00
kobject_uevent.c	driver core: allow non-root users to listen to uevents	2009-04-16 16:17:09 -07:00
kref.c
libcrc32c.c	libcrc32c: Fix "crc32c undefined" compilation error	2008-12-25 11:01:42 +11:00
list_debug.c
lmb.c	lmb: Remove __init from lmb_end_of_DRAM()	2009-08-27 12:25:26 -07:00
locking-selftest-hardirq.h
locking-selftest-mutex.h
locking-selftest-rlock-hardirq.h
locking-selftest-rlock-softirq.h
locking-selftest-rlock.h
locking-selftest-rsem.h
locking-selftest-softirq.h
locking-selftest-spin-hardirq.h
locking-selftest-spin-softirq.h
locking-selftest-spin.h
locking-selftest-wlock-hardirq.h
locking-selftest-wlock-softirq.h
locking-selftest-wlock.h
locking-selftest-wsem.h
locking-selftest.c	locking: rename trace_softirq_[enter|exit] => lockdep_softirq_[enter|exit]	2009-03-13 01:32:36 +01:00
Makefile	lib: flexible array implementation	2009-07-29 19:10:36 -07:00
nlattr.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6	2009-03-26 22:45:23 -07:00
parser.c	vfs: Use const for kernel parser table	2008-10-13 10:10:37 -07:00
percpu_counter.c	Merge branch 'core-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-01-06 17:10:04 -08:00
plist.c
prio_heap.c	lib: fix sparse shadowed variable warning	2009-01-06 15:59:11 -08:00
prio_tree.c
proportions.c	Merge branch 'core-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-01-06 17:10:04 -08:00
radix-tree.c	FS-Cache: Don't delete pending pages from the page-store tracking tree	2009-11-19 18:11:29 +00:00
random32.c
ratelimit.c
rational.c	lib/rational.c needs module.h	2010-01-18 10:19:33 -08:00
rbtree.c	rb_tree: remove redundant if()-condition in rb_erase()	2009-06-16 19:47:56 -07:00
reciprocal_div.c
rwsem-spinlock.c
rwsem.c
scatterlist.c	lib/scatterlist: add a flags to signalize mapping direction	2009-07-31 12:28:45 +02:00
sha1.c
show_mem.c
smp_processor_id.c	cpumask: convert lib/smp_processor_id to new cpumask ops	2009-01-30 15:47:34 +01:00
sort.c	generic swap(): lib/sort.c: rename swap to swap_func	2009-01-08 08:31:14 -08:00
spinlock_debug.c
string.c	strcmp: fix overflow and possibly signedness error	2009-11-18 17:18:13 -08:00
string_helpers.c	[SCSI] lib: string_get_size(): don't hang on zero; no decimals on exact	2008-10-23 11:42:20 -05:00
swiotlb.c	lib/swiotlb.c: Fix strange panic message selection logic when swiotlb fills up	2009-08-21 10:36:03 +02:00
syscall.c
textsearch.c
ts_bm.c
ts_fsm.c
ts_kmp.c
vsprintf.c	sscanf(): fix %*s%n	2009-10-01 16:11:16 -07:00