diff options
| author | Peter Hurley <[email protected]> | 2014-10-16 14:59:44 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <[email protected]> | 2014-11-05 16:26:13 -0800 |
| commit | 8a8a55105dd2857743dc4f7097f28a6cb2e696ee (patch) | |
| tree | cb6a39846c57a68202e23d3f350b192f355e60d3 /arch/um/drivers/line.c | |
| parent | bce65f18316cc6dbf858b1577a36956d30caa315 (diff) | |
uml: Fix unsafe pid reference to foreground process group
Although the tty core maintains a pid reference for the foreground
process group, if the foreground process group is changed that
pid reference is dropped. Thus, the pid reference used for signalling
could become stale.
Safely obtain a pid reference to the foreground process group and
release the reference after signalling is complete.
cc: Jeff Dike <[email protected]>
Acked-by: Richard Weinberger <[email protected]>
Signed-off-by: Peter Hurley <[email protected]>
Reviewed-by: Alan Cox <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'arch/um/drivers/line.c')
| -rw-r--r-- | arch/um/drivers/line.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/arch/um/drivers/line.c b/arch/um/drivers/line.c index 8035145f043b..62087028a9ce 100644 --- a/arch/um/drivers/line.c +++ b/arch/um/drivers/line.c @@ -632,6 +632,7 @@ static irqreturn_t winch_interrupt(int irq, void *data) int fd = winch->fd; int err; char c; + struct pid *pgrp; if (fd != -1) { err = generic_read(fd, &c, NULL); @@ -657,7 +658,10 @@ static irqreturn_t winch_interrupt(int irq, void *data) if (line != NULL) { chan_window_size(line, &tty->winsize.ws_row, &tty->winsize.ws_col); - kill_pgrp(tty->pgrp, SIGWINCH, 1); + pgrp = tty_get_pgrp(tty); + if (pgrp) + kill_pgrp(pgrp, SIGWINCH, 1); + put_pid(pgrp); } tty_kref_put(tty); } |