diff options
| author | Eric Dumazet <[email protected]> | 2015-11-24 19:39:54 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2015-11-24 20:03:55 +0000 |
| commit | 81b1a832d79749058863cffe2c0ed4ef40f6e6ec (patch) | |
| tree | 122c100882d738e0d08d377e9780a1d38ea70352 /drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | |
| parent | Merge branch 'for-linus' of git://git.kernel.dk/linux-block (diff) | |
| download | kernel-81b1a832d79749058863cffe2c0ed4ef40f6e6ec.tar.gz kernel-81b1a832d79749058863cffe2c0ed4ef40f6e6ec.zip | |
pidns: fix NULL dereference in __task_pid_nr_ns()
I got a crash during a "perf top" session that was caused by a race in
__task_pid_nr_ns() :
pid_nr_ns() was inlined, but apparently compiler chose to read
task->pids[type].pid twice, and the pid->level dereference crashed
because we got a NULL pointer at the second read :
if (pid && ns->level <= pid->level) { // CRASH
Just use RCU API properly to solve this race, and not worry about "perf
top" crashing hosts :(
get_task_pid() can benefit from same fix.
Signed-off-by: Eric Dumazet <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_object.c')
0 files changed, 0 insertions, 0 deletions