tree 0dcf873f047c48a7f3513349c13998b048e4e0fd
parent 5c12e7856d75f68c1ca8372d6cc76cdbc71763c0
author Serge Hallyn <serge.hallyn@canonical.com> 1317050309 -0500
committer Greg Kroah-Hartman <gregkh@suse.de> 1317078746 -0700

USB: pid_ns: ensure pid is not freed during kill_pid_info_as_uid

Alan Stern points out that after spin_unlock(&ps->lock) there is no
guarantee that ps->pid won't be freed.  Since kill_pid_info_as_uid() is
called after the spin_unlock(), the pid passed to it must be pinned.

Reported-by: Alan Stern <stern@rowland.harvard.edu>
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Cc: stable <stable@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>