Re: [PATCH] slab: ensure cache_alloc_refill terminates

From: KAMEZAWA Hiroyuki
Date: Mon Feb 19 2007 - 03:50:04 EST


On Mon, 19 Feb 2007 10:22:52 +0200 (EET)
Pekka J Enberg <penberg@xxxxxxxxxxxxxx> wrote:

> @@ -2987,6 +2987,14 @@
> slabp = list_entry(entry, struct slab, list);
> check_slabp(cachep, slabp);
> check_spinlock_acquired(cachep);
> +
> + /*
> + * The slab was either on partial or free list so
> + * there must be at least one object available for
> + * allocation.
> + */
> + BUG_ON(slabp->inuse >= cachep->num);
> +
I welcome this patch.

>From my experience, this infinite loop in cache_alloc_refill() is caused by
double-free, always...(I'm sorry if my knowledge around the slab is too old.)

And it looks this additional check can caught the problem but maybe no help for
fixing problem...How about adding printk like this ?
==
if (unlikely(slabp->inuse >= cachep->num)) {
printk("A problem is detected on slab %s\n", cachep->name);//this information is useful.
printk("please use DEBUG_SLAB kernel for detecting what happens.");
BUG();
}


-Kame

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/