From mboxrd@z Thu Jan 1 00:00:00 1970 Date: Fri, 6 Jul 2007 18:24:20 +0900 From: KAMEZAWA Hiroyuki Subject: [PATCH] memory unplug v7 [2/6] - isolate_lru_page fix Message-Id: <20070706182420.d7d3b615.kamezawa.hiroyu@jp.fujitsu.com> In-Reply-To: <20070706181903.428c3713.kamezawa.hiroyu@jp.fujitsu.com> References: <20070706181903.428c3713.kamezawa.hiroyu@jp.fujitsu.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-linux-mm@kvack.org Return-Path: To: KAMEZAWA Hiroyuki Cc: LKML , "linux-mm@kvack.org" , Andrew Morton , Christoph Lameter , mel@csn.ul.ie List-ID: release_pages() in mm/swap.c changes page_count() to be 0 without removing PageLRU flag... This means isolate_lru_page() can see a page, PageLRU() && page_count(page)==0.. This is BUG. (get_page() will be called against count=0 page.) Signed-off-by: KAMEZAWA Hiroyuki --- mm/migrate.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) Index: linux-2.6.22-rc6-mm1/mm/migrate.c =================================================================== --- linux-2.6.22-rc6-mm1.orig/mm/migrate.c +++ linux-2.6.22-rc6-mm1/mm/migrate.c @@ -49,9 +49,8 @@ int isolate_lru_page(struct page *page, struct zone *zone = page_zone(page); spin_lock_irq(&zone->lru_lock); - if (PageLRU(page)) { + if (PageLRU(page) && get_page_unless_zero(page)) { ret = 0; - get_page(page); ClearPageLRU(page); if (PageActive(page)) del_page_from_active_list(zone, page); -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org