summaryrefslogtreecommitdiff
path: root/mm
diff options
context:
space:
mode:
authorBadari Pulavarty <pbadari@us.ibm.com>2006-12-22 01:06:23 -0800
committerLinus Torvalds <torvalds@woody.osdl.org>2006-12-22 08:55:47 -0800
commit92a3d03aab912624cae799e5772a6eb2ef55083f (patch)
tree6bd85729918e1c56044ad5a1d084838444ab428e /mm
parentba0084048ab785c2cb1d6cc2cccabe642a5b799a (diff)
downloadlinux-3.10-92a3d03aab912624cae799e5772a6eb2ef55083f.tar.gz
linux-3.10-92a3d03aab912624cae799e5772a6eb2ef55083f.tar.bz2
linux-3.10-92a3d03aab912624cae799e5772a6eb2ef55083f.zip
[PATCH] Fix for shmem_truncate_range() BUG_ON()
Ran into BUG() while doing madvise(REMOVE) testing. If we are punching a hole into shared memory segment using madvise(REMOVE) and the entire hole is below the indirect blocks, we hit following assert. BUG_ON(limit <= SHMEM_NR_DIRECT); Signed-off-by: Badari Pulavarty <pbadari@us.ibm.com> Cc: Hugh Dickins <hugh@veritas.com> Cc: <stable@kernel.org> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'mm')
-rw-r--r--mm/shmem.c7
1 files changed, 6 insertions, 1 deletions
diff --git a/mm/shmem.c b/mm/shmem.c
index 4bb28d218eb..70da7a0981b 100644
--- a/mm/shmem.c
+++ b/mm/shmem.c
@@ -515,7 +515,12 @@ static void shmem_truncate_range(struct inode *inode, loff_t start, loff_t end)
size = SHMEM_NR_DIRECT;
nr_swaps_freed = shmem_free_swp(ptr+idx, ptr+size);
}
- if (!topdir)
+
+ /*
+ * If there are no indirect blocks or we are punching a hole
+ * below indirect blocks, nothing to be done.
+ */
+ if (!topdir || (punch_hole && (limit <= SHMEM_NR_DIRECT)))
goto done2;
BUG_ON(limit <= SHMEM_NR_DIRECT);