The patch titled
     Fix AIO completion signal notification possible ref leak
has been added to the -mm tree.  Its filename is
     aio-completion-signal-notification-fix.patch

*** Remember to use Documentation/SubmitChecklist when testing your code ***

See http://www.zip.com.au/~akpm/linux/patches/stuff/added-to-mm.txt to find
out what to do about this

------------------------------------------------------
Subject: Fix AIO completion signal notification possible ref leak
From: Sébastien Dugué <[EMAIL PROTECTED]>

Make sure we only accept valid sigev_notify values in aio_setup_sigevent(),
namely SIGEV_NONE, SIGEV_THREAD_ID or SIGEV_SIGNAL.

Signed-off-by: Sébastien Dugué <[EMAIL PROTECTED]>
Cc: Laurent Vivier <[EMAIL PROTECTED]>
Cc: Bharata B Rao <[EMAIL PROTECTED]>
Cc: Christoph Hellwig <[EMAIL PROTECTED]>
Cc: Suparna Bhattacharya <[EMAIL PROTECTED]>
Cc: Zach Brown <[EMAIL PROTECTED]>
Cc: Oleg Nesterov <[EMAIL PROTECTED]>
Cc: Badari Pulavarty <[EMAIL PROTECTED]>
Cc: Benjamin LaHaise <[EMAIL PROTECTED]>
Cc: Jean Pierre Dion <[EMAIL PROTECTED]>
Signed-off-by: Andrew Morton <[EMAIL PROTECTED]>
---

 fs/aio.c |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletion(-)

diff -puN fs/aio.c~aio-completion-signal-notification-fix fs/aio.c
--- a/fs/aio.c~aio-completion-signal-notification-fix
+++ a/fs/aio.c
@@ -938,7 +938,7 @@ static int aio_send_signal(struct aio_no
        info->si_uid = 0;
        info->si_value = notify->value;
 
-       if (notify->notify & SIGEV_THREAD_ID)
+       if (notify->notify == SIGEV_THREAD_ID)
                ret = send_sigqueue(notify->signo, sigq, notify->target);
        else
                ret = send_group_sigqueue(notify->signo, sigq, notify->target);
@@ -958,6 +958,10 @@ static long aio_setup_sigevent(struct ai
        if (event.sigev_notify == SIGEV_NONE)
                return 0;
 
+       if (event.sigev_notify != SIGEV_SIGNAL &&
+           event.sigev_notify != SIGEV_THREAD_ID)
+               return -EINVAL;
+
        notify->notify = event.sigev_notify;
        notify->signo = event.sigev_signo;
        notify->value = event.sigev_value;
_

Patches currently in -mm which might be from [EMAIL PROTECTED] are

rework-compat_sys_io_submit.patch
fix-aioh-includes.patch
fix-access_ok-checks.patch
make-good_sigevent-non-static.patch
make-good_sigevent-non-static-fix.patch
make-__sigqueue_free-and.patch
aio-completion-signal-notification.patch
aio-completion-signal-notification-fix.patch
add-listio-syscall-support.patch

-
To unsubscribe from this list: send the line "unsubscribe mm-commits" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to