]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ANDROID: binder: synchronize_rcu() when using POLLFREE.
authorMartijn Coenen <maco@android.com>
Fri, 16 Feb 2018 08:47:15 +0000 (09:47 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 7 Oct 2019 19:01:03 +0000 (21:01 +0200)
commitfcf46dcedbc419633771e16bfdf97a528f4d7dab
tree326656e14ab65edac2310117d0b58772aa66a72d
parent80eb98a4ee70428d5b4b7202195a916385a76809
ANDROID: binder: synchronize_rcu() when using POLLFREE.

commit 5eeb2ca02a2f6084fc57ae5c244a38baab07033a upstream.

To prevent races with ep_remove_waitqueue() removing the
waitqueue at the same time.

Reported-by: syzbot+a2a3c4909716e271487e@syzkaller.appspotmail.com
Signed-off-by: Martijn Coenen <maco@android.com>
Cc: stable <stable@vger.kernel.org> # 4.14+
Signed-off-by: Mattias Nissler <mnissler@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/android/binder.c