Li Zefan 04ec93fe9b fork.c: fix NULL pointer dereference when nr_threads == threads-max ...

I happened to forked lots of processes, and hit NULL pointer dereference.
It is because in copy_process() after checking max_threads, 0 is returned
but not -EAGAIN.

The bug is introduced by "CRED: Detach the credentials from task_struct"
(commit f1752eec6145c97163dbce62d17cf5d928e28a27).

Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2009-02-06 08:43:11 -08:00

..

irq

Merge branch 'core/xen' into x86/urgent

2009-02-04 14:54:56 +01:00

power

Hibernation: Introduce system_entering_hibernation

2009-01-27 02:15:45 -05:00

time

hrtimers: allow the hot-unplugging of all cpus

2009-01-30 22:35:29 +01:00

trace

ftrace: do_each_pid_task() needs rcu lock

2009-02-03 22:50:58 +01:00

.gitignore

…

acct.c

[CVE-2009-0029] System call wrappers part 04

2009-01-14 14:15:19 +01:00

async.c

kernel/async.c: fix printk warnings

2009-02-05 12:56:46 -08:00

audit_tree.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

[CVE-2009-0029] System call wrappers part 04

2009-01-14 14:15:19 +01:00

cgroup_debug.c

…

cgroup_freezer.c

…

cgroup.c

cgroup: fix root_count when mount fails due to busy subsystem

2009-01-29 18:04:45 -08:00

compat.c

Allow times and time system calls to return small negative values

2009-01-06 15:59:13 -08:00

configs.c

…

cpu.c

stop_machine/cpu hotplug: fix disable_nonboot_cpus

2009-01-07 11:36:14 -08:00

cpuset.c

cpuset: fix possible deadlock in async_rebuild_sched_domains

2009-01-19 02:44:00 +01:00

cred-internals.h

…

cred.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6

2009-01-09 13:59:25 -08:00

delayacct.c

…

dma-coherent.c

dma-coherent: Restore dma_alloc_from_coherent() large alloc fall back policy.

2009-01-21 18:51:53 +09:00

dma.c

…

exec_domain.c

[CVE-2009-0029] System call wrappers part 04

2009-01-14 14:15:19 +01:00

exit.c

[CVE-2009-0029] System call wrappers part 08

2009-01-14 14:15:21 +01:00

extable.c

…

fork.c

fork.c: fix NULL pointer dereference when nr_threads == threads-max

2009-02-06 08:43:11 -08:00

freezer.c

…

futex_compat.c

…

futex.c

[CVE-2009-0029] System call wrappers part 31

2009-01-14 14:15:31 +01:00

hrtimer.c

hrtimer: prevent negative expiry value after clock_was_set()

2009-01-30 22:35:34 +01:00

itimer.c

[CVE-2009-0029] System call wrappers part 05

2009-01-14 14:15:20 +01:00

kallsyms.c

Revert "kbuild: strip generated symbols from *.ko"

2009-01-14 21:38:20 +01:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.preempt

…

kexec.c

[CVE-2009-0029] System call wrappers part 07

2009-01-14 14:15:20 +01:00

kfifo.c

…

kgdb.c

…

kmod.c

kmod: fix varargs kernel-doc

2009-01-06 15:59:27 -08:00

kprobes.c

kprobes: check CONFIG_FREEZER instead of CONFIG_PM

2009-01-16 14:32:17 -05:00

ksysfs.c

kernel/ksysfs.c:fix dependence on CONFIG_NET

2009-01-06 10:44:31 -08:00

kthread.c

…

latencytop.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep.c

…

Makefile

kernel/up.c: omit it if SMP=y, USE_GENERIC_SMP_HELPERS=n

2009-01-14 09:42:11 -08:00

marker.c

…

module.c

modules: Use a better scheme for refcounting

2009-02-02 19:17:55 -08:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

ns_cgroup.c

ns_cgroup: remove unused spinlock

2009-01-08 08:31:02 -08:00

nsproxy.c

…

panic.c

oops: increment the oops UUID every time we oops

2009-01-06 15:59:12 -08:00

params.c

…

pid_namespace.c

…

pid.c

pid: generalize task_active_pid_ns

2009-01-08 08:31:12 -08:00

pm_qos_params.c

…

posix-cpu-timers.c

itimers: remove the per-cpu-ish-ness

2009-01-07 18:52:44 +01:00

posix-timers.c

[CVE-2009-0029] System call wrappers part 05

2009-01-14 14:15:20 +01:00

printk.c

[CVE-2009-0029] System call wrappers part 27

2009-01-14 14:15:29 +01:00

profile.c

profile: don't include <asm/ptrace.h> twice.

2009-01-06 15:59:14 -08:00

ptrace.c

[CVE-2009-0029] System call wrappers part 27

2009-01-14 14:15:29 +01:00

rcuclassic.c

rcu: add __cpuinit to rcu_init_percpu_data()

2009-01-14 11:26:40 +01:00

rcupdate.c

…

rcupreempt_trace.c

…

rcupreempt.c

…

rcutorture.c

rcu: fix bug in rcutorture system-shutdown code

2009-01-07 23:36:25 +01:00

rcutree_trace.c

…

rcutree.c

rcu: add __cpuinit to rcu_init_percpu_data()

2009-01-14 11:26:40 +01:00

relay.c

relay: fix lock imbalance in relay_late_setup_files

2009-01-18 20:29:35 +01:00

res_counter.c

memcg: memory cgroup resource counters for hierarchy

2009-01-08 08:31:05 -08:00

resource.c

resources: fix parameter name and kernel-doc

2009-01-15 16:39:38 -08:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

…

rtmutex-tester.c

…

rtmutex.c

…

rtmutex.h

…

rwsem.c

…

sched_clock.c

…

sched_cpupri.c

sched: fix section mismatch

2009-01-06 11:07:15 +01:00

sched_cpupri.h

…

sched_debug.c

sched: partly revert "sched debug: remove NULL checking in print_cfs_rt_rq()"

2009-01-11 02:40:32 +01:00

sched_fair.c

sched: fix buddie group latency

2009-02-01 10:49:51 +01:00

sched_features.h

…

sched_idletask.c

…

sched_rt.c

sched_rt: don't use first_cpu on cpumask created with cpumask_and

2009-02-01 10:49:52 +01:00

sched_stats.h

itimers: remove the per-cpu-ish-ness

2009-01-07 18:52:44 +01:00

sched.c

wait: prevent exclusive waiter starvation

2009-02-05 12:56:48 -08:00

seccomp.c

…

semaphore.c

…

signal.c

signals, debug: fix BUG: using smp_processor_id() in preemptible code in print_fatal_signal()

2009-01-27 00:36:19 +01:00

smp.c

generic-ipi: use per cpu data for single cpu ipi calls

2009-01-30 18:31:08 +01:00

softirq.c

…

softlockup.c

softlock: fix false panic which can occur if softlockup_thresh is reduced

2009-01-14 11:48:07 +01:00

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

[CVE-2009-0029] Make sys_syslog a conditional system call

2009-01-14 14:15:16 +01:00

sys.c

revert "rlimit: permit setting RLIMIT_NOFILE to RLIM_INFINITY"

2009-02-05 12:56:47 -08:00

sysctl_check.c

…

sysctl.c

Merge branch 'core/debugobjects' into core/urgent

2009-01-22 10:03:02 +01:00

taskstats.c

…

test_kprobes.c

kprobes: add tests for register_kprobes

2009-01-06 15:59:20 -08:00

time.c

[CVE-2009-0029] System call wrappers part 01

2009-01-14 14:15:18 +01:00

timeconst.pl

…

timer.c

[CVE-2009-0029] System call wrappers part 27

2009-01-14 14:15:29 +01:00

tracepoint.c

…

tsacct.c

mm: introduce get_mm_hiwater_xxx(), fix taskstats->hiwater_xxx accounting

2009-01-06 15:59:09 -08:00

uid16.c

[CVE-2009-0029] System call wrappers part 19

2009-01-14 14:15:26 +01:00

up.c

smp_call_function_single(): be slightly less stupid, fix #2

2009-01-12 16:04:37 +01:00

user_namespace.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

wait: prevent exclusive waiter starvation

2009-02-05 12:56:48 -08:00

workqueue.c

work_on_cpu: Use our own workqueue.

2009-01-19 22:36:07 +01:00