linux-kernel - Question about page frame management in x86

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Thu, 30 Oct 2008 17:49:58 -0400 (EDT)
From:	"Emre Can Sezer" <ecsezer@...u.edu>
To:	linux-kernel@...r.kernel.org
Cc:	ecsezer@...u.edu
Subject: Question about page frame management in x86_64

Hi,

For my research I'm trying to keep track of which pages belong to an LKM.
I use linux-2.6.26.

When the module is first loaded, the virtual memory region (ffff ffff a000
0000) maps to a set of page frames, which I track.  Later on (after all
the modules have loaded), these same pages are returned by
get_free_pages(), before they are released.  At this point, the page table
entries have also changed.  I observe this for all modules.  Since the
modules haven't exited, I can only assume that the pages are relocated. 
However, neither free_more_memory() is called nor balance_pgdat() reclaims
any pages.  They aren't freed via any of the __free_pages() family of
functions either.  What could be relocating these pages and which
functions would be responsible for it?

Thanks in advance,

John

PS.  I'm not subscribed to the mailing list, so please CC to me.  Thanks.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/