]> Git Repo - linux.git/commit - kernel/cgroup.c
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1cf6e7d) | patch
cgroups: fix possible use after free
authorLi Zefan <[email protected]>
Wed, 18 Feb 2009 22:48:20 +0000 (14:48 -0800)
committerLinus Torvalds <[email protected]>
Wed, 18 Feb 2009 23:37:54 +0000 (15:37 -0800)
commit67e055d144c5b2acdc1c63811fde031263bf92c5
tree6bdb0af25cc30d7bc8a8d54db3625f8486c2f5f9tree | snapshot
parent1cf6e7d83bf334cc5916137862c920a97aabc018commit | diff
cgroups: fix possible use after free

In cgroup_kill_sb(), root is freed before sb is detached from the list, so
another sget() may find this sb and call cgroup_test_super(), which will
access the root that has been freed.

Reported-by: Al Viro <[email protected]>
Signed-off-by: Li Zefan <[email protected]>
Acked-by: Paul Menage <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
kernel/cgroup.c diff | blob | blame | history
Empty description
This page took 0.050232 seconds and 4 git commands to generate.