diff options
| author | Darren Hart <[email protected]> | 2012-07-20 18:53:31 +0000 |
|---|---|---|
| committer | Thomas Gleixner <[email protected]> | 2012-07-24 14:02:57 +0000 |
| commit | 6f7b0a2a5c0fb03be7c25bd1745baa50582348ef (patch) | |
| tree | 23bf0f7ccfeea44ef9aa8057d53ade47b69a8a44 /tools/perf/util/scripting-engines/trace-event-perl.c | |
| parent | futex: Fix bug in WARN_ON for NULL q.pi_state (diff) | |
| download | kernel-6f7b0a2a5c0fb03be7c25bd1745baa50582348ef.tar.gz kernel-6f7b0a2a5c0fb03be7c25bd1745baa50582348ef.zip | |
futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
If uaddr == uaddr2, then we have broken the rule of only requeueing
from a non-pi futex to a pi futex with this call. If we attempt this,
as the trinity test suite manages to do, we miss early wakeups as
q.key is equal to key2 (because they are the same uaddr). We will then
attempt to dereference the pi_mutex (which would exist had the futex_q
been properly requeued to a pi futex) and trigger a NULL pointer
dereference.
Signed-off-by: Darren Hart <[email protected]>
Cc: Dave Jones <[email protected]>
Cc: [email protected]
Link: http://lkml.kernel.org/r/ad82bfe7f7d130247fbe2b5b4275654807774227.1342809673.git.dvhart@linux.intel.com
Signed-off-by: Thomas Gleixner <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-perl.c')
0 files changed, 0 insertions, 0 deletions