diff options
| author | Eric Dumazet <edumazet@google.com> | 2015-11-24 20:39:54 +0100 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2015-11-24 21:03:55 +0100 |
| commit | 81b1a832d79749058863cffe2c0ed4ef40f6e6ec (patch) | |
| tree | 122c100882d738e0d08d377e9780a1d38ea70352 /lib/halfmd4.c | |
| parent | Merge branch 'for-linus' of git://git.kernel.dk/linux-block (diff) | |
| download | linux-81b1a832d79749058863cffe2c0ed4ef40f6e6ec.tar.xz linux-81b1a832d79749058863cffe2c0ed4ef40f6e6ec.zip | |
pidns: fix NULL dereference in __task_pid_nr_ns()
I got a crash during a "perf top" session that was caused by a race in
__task_pid_nr_ns() :
pid_nr_ns() was inlined, but apparently compiler chose to read
task->pids[type].pid twice, and the pid->level dereference crashed
because we got a NULL pointer at the second read :
if (pid && ns->level <= pid->level) { // CRASH
Just use RCU API properly to solve this race, and not worry about "perf
top" crashing hosts :(
get_task_pid() can benefit from same fix.
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'lib/halfmd4.c')
0 files changed, 0 insertions, 0 deletions