Re: [PATCH] do_task_stat: don't use task_pid_nr_ns() lockless

[ebiederm@xmission.com (Eric W. Biederman)]

Pavel Emelyanov <xemul@openvz.org> writes:

> Eric W. Biederman wrote:
>> We only get detached in release_task so it is a pretty small window
>> where we can return pid == 0.  Usually get_task_pid will fail first
>> and we will return -ESRCH.  Still the distance from open to 
>> 
>> There is another bug in here as well.  current->nsproxy->pid_ns is wrong.
>> What we want is: ns = dentry->d_sb->s_fs_info;
>
> Actually I thought about this recently - if we produce the list
> of tasks based on the sb's namespace, then we should fill the
> tasks' files according to the sb's namespace as well, not according
> to the current namespace.

Exactly.  That is the problem I was pointing out.  Patch in a bit.
In do_proc_stat we are currently referencing current->nsproxy->pid_ns;

>> Otherwise we will have file descriptor passing races and the like.
>
> Can you elaborate?

Just the classic problem that if you use current at other then open
time the contents of the file descriptor may depend on who is reading
it which is problematic.

Eric