| commit | 298a2d87518ec01bb36070fafe31da7746556db0 | |
| author | Linus Torvalds <torvalds@linux-foundation.org> | |
| Tue, 31 Jan 2017 21:10:59 +0000 (31 13:10 -0800) | ||
| committer | Linus Torvalds <torvalds@linux-foundation.org> | |
| Tue, 31 Jan 2017 21:10:59 +0000 (31 13:10 -0800) | ||
| tree | 7598b4a8b90fa7f0d5e319f29bd7d5c13fbcc282 | treesnapshot (tar.gz zip) |
| parent | 52e02f2797cf44e00da987a7736cc0f5192132f7 | commitdiff |
| parent | 966d2b04e070bc040319aaebfec09e0144dc3341 | commitdiff |
Merge branch 'for-4.10-fixes' of git://git./linux/kernel/git/tj/percpu
Pull percpu fix from Tejun Heo:
"Douglas found and fixed a ref leak bug in percpu_ref_tryget[_live]().
The bug is caused by storing the return value of atomic_long_inc_not_zero()
into an int temp variable before returning it as a bool. The interim
cast to int loses the upper bits and can lead to false negatives. As
percpu_ref uses a high bit to mark a draining counter, this can happen
relatively easily.
Fixed by using bool for the temp variable"
* 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu:
percpu-refcount: fix reference leak during percpu-atomic transition
Pull percpu fix from Tejun Heo:
"Douglas found and fixed a ref leak bug in percpu_ref_tryget[_live]().
The bug is caused by storing the return value of atomic_long_inc_not_zero()
into an int temp variable before returning it as a bool. The interim
cast to int loses the upper bits and can lead to false negatives. As
percpu_ref uses a high bit to mark a draining counter, this can happen
relatively easily.
Fixed by using bool for the temp variable"
* 'for-4.10-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/percpu:
percpu-refcount: fix reference leak during percpu-atomic transition