diff options
author | Oleg Nesterov <[email protected]> | 2009-09-23 15:56:59 -0700 |
---|---|---|
committer | Linus Torvalds <[email protected]> | 2009-09-24 07:21:01 -0700 |
commit | 964ee7df90d799e38fb1556c57cd5c45fc736436 (patch) | |
tree | 58ae7325f80394cb86409d5876c710376dde8e1a /scripts/basic/docproc.c | |
parent | 61be228a06dc6e8662f30e89eda3c12083c1f379 (diff) |
exec: fix set_binfmt() vs sys_delete_module() race
sys_delete_module() can set MODULE_STATE_GOING after
search_binary_handler() does try_module_get(). In this case
set_binfmt()->try_module_get() fails but since none of the callers
check the returned error, the task will run with the wrong old
->binfmt.
The proper fix should change all ->load_binary() methods, but we can
rely on fact that the caller must hold a reference to binfmt->module
and use __module_get() which never fails.
Signed-off-by: Oleg Nesterov <[email protected]>
Acked-by: Rusty Russell <[email protected]>
Cc: Hiroshi Shimamoto <[email protected]>
Cc: Roland McGrath <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'scripts/basic/docproc.c')
0 files changed, 0 insertions, 0 deletions