]> git.hungrycats.org Git - linux/commit
[PATCH] bug in sys_io_setup
authorAndrew Morton <akpm@osdl.org>
Thu, 3 Jun 2004 01:05:09 +0000 (18:05 -0700)
committerLinus Torvalds <torvalds@ppc970.osdl.org>
Thu, 3 Jun 2004 01:05:09 +0000 (18:05 -0700)
commit2ba1bdccac7d4e36a1774b6ce335e95120717999
tree2709bd5d66b9a99f2da8bccbe6c69a9e256c5253
parent306ad72c3e474a17b6cbcb8d36a279fbdeae7a73
[PATCH] bug in sys_io_setup

From: Jerzy Szczepkowski <js189202@zodiac.mimuw.edu.pl>

There is a bug in sys_io_setup().

If ioctx_alloc() succeeds and put_user() fails io_destroy() is called.
io_destroy() assumes that ioctx->users >= 2 (if context is alive) and calls
put_ioctx twice, while in this sequence ioctx->users == 1.

Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
fs/aio.c