On Tue, 19 Mar 2013 13:31:18 +0400 Vladimir Davydov <[email protected]> 
wrote:

> mnt_drop_write() must be called only if mnt_want_write() succeeded,
> otherwise the mnt_writers counter will diverge.
> 
> ...
>
> --- a/ipc/mqueue.c
> +++ b/ipc/mqueue.c
> @@ -840,7 +840,8 @@ out_putfd:
>               fd = error;
>       }
>       mutex_unlock(&root->d_inode->i_mutex);
> -     mnt_drop_write(mnt);
> +     if (!ro)
> +             mnt_drop_write(mnt);
>  out_putname:
>       putname(name);
>       return fd;

huh, that's been there for a while.  What were the runtime-visible
effects of the bug?
_______________________________________________
Devel mailing list
[email protected]
https://lists.openvz.org/mailman/listinfo/devel

Reply via email to