]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 31605de) | patch
eventpoll: use-after-possible-free in epoll_create1()
authorAl Viro <viro@zeniv.linux.org.uk>
Sat, 18 Aug 2012 02:42:36 +0000 (22:42 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Wed, 22 Aug 2012 14:26:55 +0000 (10:26 -0400)
commit98022748f6c7bce85b9f123fd4d1a621219dd8d9
tree475003205a40e79060c072bf4ed6a2cf097ff7edtree | snapshot
parent31605debdf5459cc8aacabf192a911a803a81c26commit | diff
eventpoll: use-after-possible-free in epoll_create1()

As soon as we'd installed the file into descriptor table, it can
get closed by another thread.  Freeing ep in process...

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/eventpoll.c diff | blob | blame | history
A mirror of Linus' kernel repository