diff options
| author | Oleg Nesterov <oleg@tv-sign.ru> | 2008-02-08 13:19:07 +0100 |
|---|---|---|
| committer | Linus Torvalds <torvalds@woody.linux-foundation.org> | 2008-02-08 18:22:26 +0100 |
| commit | 3a515e4a62dbf7e4c213740268a5267faa69e5b2 (patch) | |
| tree | 51f98e662c80ca5de628f09c5eb24d18f1794f6c /mm/bounce.c | |
| parent | do_wait: fix security checks (diff) | |
| download | linux-3a515e4a62dbf7e4c213740268a5267faa69e5b2.tar.xz linux-3a515e4a62dbf7e4c213740268a5267faa69e5b2.zip | |
wait_task_continued/zombie: don't use task_pid_nr_ns() lockless
Surprise, the other two wait_task_*() functions also abuse the
task_pid_nr_ns() function, and may cause read-after-free or report nr == 0
in wait_task_continued(). wait_task_zombie() doesn't have this problem,
but it is still better to cache pid_t rather than call task_pid_nr_ns()
three times on the saved pid_namespace.
Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
Cc: Roland McGrath <roland@redhat.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'mm/bounce.c')
0 files changed, 0 insertions, 0 deletions