diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2017-01-31 13:10:59 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2017-01-31 13:10:59 -0800 |
| commit | 298a2d87518ec01bb36070fafe31da7746556db0 (patch) | |
| tree | 7598b4a8b90fa7f0d5e319f29bd7d5c13fbcc282 /net/core/lwt_bpf.c | |
| parent | 52e02f2797cf44e00da987a7736cc0f5192132f7 (diff) | |
| parent | 966d2b04e070bc040319aaebfec09e0144dc3341 (diff) | |
Merge branch 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu
Pull percpu fix from Tejun Heo:
"Douglas found and fixed a ref leak bug in percpu_ref_tryget[_live]().
The bug is caused by storing the return value of atomic_long_inc_not_zero()
into an int temp variable before returning it as a bool. The interim
cast to int loses the upper bits and can lead to false negatives. As
percpu_ref uses a high bit to mark a draining counter, this can happen
relatively easily.
Fixed by using bool for the temp variable"
* 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu:
percpu-refcount: fix reference leak during percpu-atomic transition
Diffstat (limited to 'net/core/lwt_bpf.c')
0 files changed, 0 insertions, 0 deletions