Re: [Bug 9138] New: kernel overwrites MAP_PRIVATE mmap

[Paolo Bonzini <paolo.bonzini@lu.unisi.ch>]

This testcase is not a regression, but it is still a bug, and I believe
the root cause is the same: in this case, it is ftruncate modifying the
length of MAP_PRIVATE mmaps.


#include <sys/mman.h>
#include <fcntl.h>
#include <stdio.h>

int main()
{
   system ("echo foo > gst.im");
   int f = open ("gst.im", O_RDONLY);

   char *p = mmap(NULL, 1628636, PROT_READ, MAP_PRIVATE, f, 0);
   close (f);
   f = open("gst.im", O_RDWR|O_CREAT, 0666);
   printf ("%s", p);
   ftruncate (f, 0);
   mmap(NULL, 401408, PROT_READ|PROT_WRITE|PROT_EXEC,
        MAP_PRIVATE|MAP_ANON, -1, 0);
   printf ("%s", p);
}


Expected (and this is what it gives on e.g. Darwin):

foo
foo

Actual output:

foo
Bus error


--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>