tree de9d4b432e48d4c919b70a627d9ba0b50e840de0
parent 12783b002db1f02c29353c8f698a85514420b9f4
author Amy Griffis <amy.griffis@hp.com> 1148162406 -0700
committer Linus Torvalds <torvalds@g5.osdl.org> 1148241558 -0700

[PATCH] fix race in inotify_release

While doing some inotify stress testing, I hit the following race.  In
inotify_release(), it's possible for a watch to be removed from the lists
in between dropping dev->mutex and taking inode->inotify_mutex.  The
reference we hold prevents the watch from being freed, but not from being
removed.

Checking the dev's idr mapping will prevent a double list_del of the
same watch.

Signed-off-by: Amy Griffis <amy.griffis@hp.com>
Acked-by: John McCutchan <john@johnmccutchan.com>
Cc: Robert Love <rml@novell.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>