From: Andrew Morton <akpm@digeo.com>
To: Manfred Spraul <manfred@colorfullife.com>
Cc: zwane@holomorphy.com, linux-kernel@vger.kernel.org, jochen@jochen.org
Subject: Re: BUG: Use after free in detach_pid
Date: Sat, 22 Mar 2003 12:44:47 -0800 [thread overview]
Message-ID: <20030322124447.59c6b4c3.akpm@digeo.com> (raw)
In-Reply-To: <3E7CC4F2.8000500@colorfullife.com>
Manfred Spraul <manfred@colorfullife.com> wrote:
>
> You mentioned that the last detach_pid() within __unhash_process oopsed. That means the reference count of the task structure was off by one, and the
> put_task_struct(pid->task)
> within
> detach_pid(p,PIDTYPE_PGID);
> freed the task structure.
>
Might be related to http://bugme.osdl.org/show_bug.cgi?id=482
in which someone did put_task_struct() on an already-freed task_struct.
And that was a uniprocessor without pgcl gunk.
It is not known whether preemption was enabled?
next prev parent reply other threads:[~2003-03-22 20:34 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-03-22 16:57 Zwane Mwaikambo
2003-03-22 17:05 ` Zwane Mwaikambo
2003-03-22 17:15 ` William Lee Irwin III
2003-03-22 20:17 ` Manfred Spraul
2003-03-22 20:41 ` Zwane Mwaikambo
2003-03-22 20:44 ` Andrew Morton [this message]
2003-03-22 20:44 ` Zwane Mwaikambo
2003-03-23 2:09 ` William Lee Irwin III
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20030322124447.59c6b4c3.akpm@digeo.com \
--to=akpm@digeo.com \
--cc=jochen@jochen.org \
--cc=linux-kernel@vger.kernel.org \
--cc=manfred@colorfullife.com \
--cc=zwane@holomorphy.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®