diff options
| author | Linus Torvalds <[email protected]> | 2017-01-31 21:10:59 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2017-01-31 21:10:59 +0000 |
| commit | 298a2d87518ec01bb36070fafe31da7746556db0 (patch) | |
| tree | 7598b4a8b90fa7f0d5e319f29bd7d5c13fbcc282 /fs/proc/array.c | |
| parent | Merge branch 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/gi... (diff) | |
| parent | percpu-refcount: fix reference leak during percpu-atomic transition (diff) | |
| download | kernel-298a2d87518ec01bb36070fafe31da7746556db0.tar.gz kernel-298a2d87518ec01bb36070fafe31da7746556db0.zip | |
Merge branch 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu
Pull percpu fix from Tejun Heo:
"Douglas found and fixed a ref leak bug in percpu_ref_tryget[_live]().
The bug is caused by storing the return value of atomic_long_inc_not_zero()
into an int temp variable before returning it as a bool. The interim
cast to int loses the upper bits and can lead to false negatives. As
percpu_ref uses a high bit to mark a draining counter, this can happen
relatively easily.
Fixed by using bool for the temp variable"
* 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu:
percpu-refcount: fix reference leak during percpu-atomic transition
Diffstat (limited to 'fs/proc/array.c')
0 files changed, 0 insertions, 0 deletions