v1
2026-09-14
修复 maple_tree RCU 模式崩溃 · v1
修复 maple tree RCU 模式下 maple_range_64 节点销毁路径的两个问题，涉及 mte_dead_leaves 后 mt_clear_meta 无法识别元数据槽。
原始补丁链接
子 Patch（2）
1/2
maple_tree: remove mt_clear_meta() to fix a pointer corruption
mt_clear_meta() decides whether the last slot of a maple_range_64 node holds a child pointer or a struct maple_metadata with the check if (unlikely((mte_to_node(next) &&
2/2
maple_tree: fix invalid memory access in mt_free_walk()
mt_free_walk() descends to the left-most unvisited “parent-of-a-leaf” node by checking the condition: if ((offset < mt_slots[type]) && rcu_dereference_protected(slots[offset],