diff options
| author |   Amy Griffis <amy.griffis@hp.com> | 2006-05-20 15:00:06 -0700 |
|---|---|---|
| committer |   Linus Torvalds <torvalds@g5.osdl.org> | 2006-05-21 12:59:18 -0700 |
| commit | 66055a4e7334b05354c835123ff621c5f700e56a (patch) | |
| tree | de9d4b432e48d4c919b70a627d9ba0b50e840de0 /mm/page_alloc.c | |
| parent | [PATCH] SPARSEMEM incorrectly calculates section number (diff) | |
| download | linux-rng-66055a4e7334b05354c835123ff621c5f700e56a.tar.xz linux-rng-66055a4e7334b05354c835123ff621c5f700e56a.zip | |
[PATCH] fix race in inotify_release
While doing some inotify stress testing, I hit the following race. In
inotify_release(), it's possible for a watch to be removed from the lists
in between dropping dev->mutex and taking inode->inotify_mutex. The
reference we hold prevents the watch from being freed, but not from being
removed.
Checking the dev's idr mapping will prevent a double list_del of the
same watch.
Signed-off-by: Amy Griffis <amy.griffis@hp.com>
Acked-by: John McCutchan <john@johnmccutchan.com>
Cc: Robert Love <rml@novell.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'mm/page_alloc.c')
0 files changed, 0 insertions, 0 deletions