tree 849fcb60282bc6c0a01c3113dfc617c7f03f97d3
parent eaaea8036d0261d87d7072c5bc88c7ea730c18ac
author Peter Zijlstra <peterz@infradead.org> 1254759452 +0200
committer Thomas Gleixner <tglx@linutronix.de> 1254841201 +0200

futex: Nullify robust lists after cleanup

The robust list pointers of user space held futexes are kept intact
over an exec() call. When the exec'ed task exits exit_robust_list() is
called with the stale pointer. The risk of corruption is minimal, but
still it is incorrect to keep the pointers valid. Actually glibc
should uninstall the robust list before calling exec() but we have to
deal with it anyway.

Nullify the pointers after [compat_]exit_robust_list() has been
called.

Reported-by: Anirban Sinha <ani@anirban.org>
Signed-off-by: Peter Zijlstra <peterz@infradead.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
LKML-Reference: <new-submission>
Cc: stable@kernel.org