diff options
| author | Andrea Arcangeli <[email protected]> | 2018-01-04 16:18:09 -0800 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2018-01-04 16:45:09 -0800 |
| commit | 0cbb4b4f4c44f54af268969b18d8deda63aded59 (patch) | |
| tree | e4195e9d5425397f557117077d6306eadf94e350 /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | d09cfbbfa0f761a97687828b5afb27b56cbf2e19 (diff) | |
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
The previous fix in commit 384632e67e08 ("userfaultfd: non-cooperative:
fix fork use after free") corrected the refcounting in case of
UFFD_EVENT_FORK failure for the fork userfault paths.
That still didn't clear the vma->vm_userfaultfd_ctx of the vmas that
were set to point to the aborted new uffd ctx earlier in
dup_userfaultfd.
Link: http://lkml.kernel.org/r/[email protected]
Signed-off-by: Andrea Arcangeli <[email protected]>
Reported-by: syzbot <[email protected]>
Reviewed-by: Mike Rapoport <[email protected]>
Cc: Eric Biggers <[email protected]>
Cc: Dmitry Vyukov <[email protected]>
Cc: <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions