summaryrefslogtreecommitdiffstats
path: root/kernel/nsproxy.c
diff options
context:
space:
mode:
authorLi Zefan <lizf@cn.fujitsu.com>2009-02-18 23:48:20 +0100
committerLinus Torvalds <torvalds@linux-foundation.org>2009-02-19 00:37:54 +0100
commit67e055d144c5b2acdc1c63811fde031263bf92c5 (patch)
tree6bdb0af25cc30d7bc8a8d54db3625f8486c2f5f9 /kernel/nsproxy.c
parentmm: task dirty accounting fix (diff)
downloadlinux-67e055d144c5b2acdc1c63811fde031263bf92c5.tar.xz
linux-67e055d144c5b2acdc1c63811fde031263bf92c5.zip
cgroups: fix possible use after free
In cgroup_kill_sb(), root is freed before sb is detached from the list, so another sget() may find this sb and call cgroup_test_super(), which will access the root that has been freed. Reported-by: Al Viro <viro@ZenIV.linux.org.uk> Signed-off-by: Li Zefan <lizf@cn.fujitsu.com> Acked-by: Paul Menage <menage@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'kernel/nsproxy.c')
0 files changed, 0 insertions, 0 deletions