diff options
| author |   Al Viro <viro@zeniv.linux.org.uk> | 2019-05-09 02:32:28 -0400 |
|---|---|---|
| committer | Al Viro <viro@zeniv.linux.org.uk> | 2019-05-09 02:32:50 -0400 |
| commit | 05883eee857eab4693e7d13ebab06716475c5754 (patch) | |
| tree | 686a142254d360a963f010bb573f4db5fb83e7bc /arch/powerpc/mm/numa.c | |
| parent | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next (diff) | |
| download | linux-dev-05883eee857eab4693e7d13ebab06716475c5754.tar.xz linux-dev-05883eee857eab4693e7d13ebab06716475c5754.zip | |
do_move_mount(): fix an unsafe use of is_anon_ns()
What triggers it is a race between mount --move and umount -l
of the source; we should reject it (the source is parentless *and*
not the root of anon namespace at that), but the check for namespace
being an anon one is broken in that case - is_anon_ns() needs
ns to be non-NULL. Better fixed here than in is_anon_ns(), since
the rest of the callers is guaranteed to get a non-NULL argument...
Reported-by: syzbot+494c7ddf66acac0ad747@syzkaller.appspotmail.com
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Diffstat (limited to 'arch/powerpc/mm/numa.c')
0 files changed, 0 insertions, 0 deletions