Darren Hart 84bc4af590 futex: Detect mismatched requeue targets ... There is currently no check to ensure that userspace uses the same futex requeue target (uaddr2) in futex_requeue() that the waiter used in futex_wait_requeue_pi(). A mismatch here could very unexpected results as the waiter assumes it either wakes on uaddr1 or uaddr2. We could detect this on wakeup in the waiter, but the cleanup is more intense after the improper requeue has occured. This patch stores the waiter's expected requeue target in a new requeue_pi_key pointer in the futex_q which futex_requeue() checks prior to attempting to do a proxy lock acquistion or a requeue when requeue_pi=1. If they don't match, return -EINVAL from futex_requeue, aborting the requeue of any remaining waiters. Signed-off-by: Darren Hart <dvhltc@us.ibm.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Eric Dumazet <eric.dumazet@gmail.com> Cc: John Kacur <jkacur@redhat.com> Cc: Dinakar Guniguntala <dino@in.ibm.com> Cc: John Stultz <johnstul@us.ibm.com> LKML-Reference: <20090814003650.14634.63916.stgit@Aeon> Signed-off-by: Thomas Gleixner <tglx@linutronix.de>		2009-08-16 10:59:05 +02:00
..
gcov	gcov: enable GCOV_PROFILE_ALL for x86_64	2009-06-18 13:03:58 -07:00
irq	genirq: Fix UP compile failure caused by irq_thread_check_affinity	2009-07-22 23:18:46 +02:00
power	headers: smp_lock.h redux	2009-07-12 12:22:34 -07:00
time	clocksource: Prevent NULL pointer dereference	2009-07-19 17:15:54 +02:00
trace	tracing/stat: Fix seqfile memory leak	2009-07-23 09:53:55 -04:00
.gitignore
acct.c	bsdacct: fix access to invalid filp in acct_on()	2009-06-30 18:56:00 -07:00
async.c	async: Fix lack of boot-time console due to insufficient synchronization	2009-06-08 12:31:53 -07:00
audit_tree.c	Fix rule eviction order for AUDIT_DIR	2009-06-24 00:02:38 -04:00
audit_watch.c	Audit: clean up all op= output to include string quoting	2009-06-24 00:00:52 -04:00
audit.c	Fix rule eviction order for AUDIT_DIR	2009-06-24 00:02:38 -04:00
audit.h	Fix rule eviction order for AUDIT_DIR	2009-06-24 00:02:38 -04:00
auditfilter.c	Audit: clean up all op= output to include string quoting	2009-06-24 00:00:52 -04:00
auditsc.c	Fix rule eviction order for AUDIT_DIR	2009-06-24 00:02:38 -04:00
backtracetest.c
bounds.c
capability.c
cgroup_debug.c
cgroup_freezer.c
cgroup.c	cgroup avoid permanent sleep at rmdir	2009-07-29 19:10:35 -07:00
compat.c
configs.c
cpu.c	mm/init: cpu_hotplug_init() must be initialized before SLAB	2009-06-22 21:18:12 -07:00
cpuset.c	cpuset,mm: update tasks' mems_allowed in time	2009-06-16 19:47:31 -07:00
cred-internals.h
cred.c
delayacct.c
dma-coherent.c
dma.c
exec_domain.c
exit.c	headers: mnt_namespace.h redux	2009-07-08 09:31:56 -07:00
extable.c
fork.c	mm: copy over oom_adj value at fork time	2009-07-29 19:10:34 -07:00
freezer.c	sched: fix nr_uninterruptible accounting of frozen tasks really	2009-07-18 14:19:53 +02:00
futex_compat.c
futex.c	futex: Detect mismatched requeue targets	2009-08-16 10:59:05 +02:00
groups.c	groups: move code to kernel/groups.c	2009-06-16 19:47:48 -07:00
hrtimer.c	hrtimer: Fix migration expiry check	2009-07-10 17:32:55 +02:00
hung_task.c
itimer.c
kallsyms.c	kernel/kallsyms.c: replace deprecated __initcall with device_initcall and fix whitespace	2009-06-09 22:37:52 +02:00
Kconfig.freezer
Kconfig.hz
Kconfig.preempt
kexec.c	kexec: fix omitting offset in extended crashkernel syntax	2009-07-29 19:10:34 -07:00
kfifo.c	kernel/kfifo.c: replace conditional test with is_power_of_2()	2009-06-16 19:47:47 -07:00
kgdb.c
kmod.c	headers: mnt_namespace.h redux	2009-07-08 09:31:56 -07:00
kprobes.c	kprobes: Use kernel_text_address() for checking probe address	2009-07-30 16:44:06 -07:00
ksysfs.c
kthread.c	update the comment in kthread_stop()	2009-07-27 12:15:46 -07:00
latencytop.c
lockdep_internals.h
lockdep_proc.c
lockdep_states.h
lockdep.c
Makefile	Merge branch 'tracing-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-06-28 11:05:04 -07:00
marker.c
module.c	module: use MODULE_SYMBOL_PREFIX with module_layout	2009-07-27 12:15:45 -07:00
mutex-debug.c
mutex-debug.h
mutex.c	Merge branch 'linus' into perfcounters/core	2009-06-11 17:55:42 +02:00
mutex.h
notifier.c
ns_cgroup.c
nsproxy.c	nsproxy: extract create_nsproxy()	2009-06-18 13:03:56 -07:00
panic.c
params.c	module_param: allow 'bool' module_params to be bool, not just int.	2009-06-12 21:46:58 +09:30
perf_counter.c	Merge branch 'perf-counters-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/peterz/linux-2.6-perf	2009-07-22 11:41:56 -07:00
pid_namespace.c	pidns: rewrite copy_pid_ns()	2009-06-18 13:03:55 -07:00
pid.c	kmemleak: Remove alloc_bootmem annotations introduced in the past	2009-07-09 17:07:02 +01:00
pm_qos_params.c
posix-cpu-timers.c
posix-timers.c
printk.c	printk: Add KERN_DEFAULT printk log-level	2009-06-16 11:02:28 -07:00
profile.c	profile: suppress warning about large allocations when profile=1 is specified	2009-07-29 19:10:36 -07:00
ptrace.c	cred_guard_mutex: do not return -EINTR to user-space	2009-07-06 13:57:04 -07:00
rcuclassic.c
rcupdate.c
rcupreempt_trace.c
rcupreempt.c
rcutorture.c
rcutree_trace.c
rcutree.c	rcu: Mark Hierarchical RCU no longer experimental	2009-06-24 15:02:48 +02:00
rcutree.h
relay.c
res_counter.c	memcg: add interface to reset limits	2009-06-18 13:03:48 -07:00
resource.c	kernel/resource.c: fix sign extension in reserve_setup()	2009-06-30 18:56:00 -07:00
rtmutex_common.h
rtmutex-debug.c
rtmutex-debug.h
rtmutex-tester.c
rtmutex.c	trivial: fix ETIMEOUT -> ETIMEDOUT typos	2009-06-12 18:01:50 +02:00
rtmutex.h
rwsem.c
sched_clock.c
sched_cpupri.c	sched: Remove unneeded __ref tag	2009-06-17 16:08:04 +02:00
sched_cpupri.h
sched_debug.c	sched: Hide runqueues from direct refer at source code level	2009-06-17 18:29:42 +02:00
sched_fair.c	sched: Account for vruntime wrapping	2009-07-18 11:17:08 +02:00
sched_features.h
sched_idletask.c
sched_rt.c	sched_rt: Fix overload bug on rt group scheduling	2009-07-10 10:43:29 +02:00
sched_stats.h
sched.c	sched: fix load average accounting vs. cpu hotplug	2009-07-18 14:19:52 +02:00
seccomp.c
semaphore.c
signal.c	do_sigaltstack: small cleanups	2009-08-01 11:18:56 -07:00
slow-work.c	slow-work: use round_jiffies() for thread pool's cull and OOM timers	2009-06-16 19:47:49 -07:00
smp.c	cpumask: alloc zeroed cpumask for static cpumask_var_ts	2009-06-09 22:30:27 +09:30
softirq.c	softirq: introduce tasklet_hrtimer infrastructure	2009-07-22 17:01:17 +02:00
softlockup.c
spinlock.c
srcu.c
stacktrace.c
stop_machine.c
sys_ni.c
sys.c	groups: move code to kernel/groups.c	2009-06-16 19:47:48 -07:00
sysctl_check.c
sysctl.c	Merge branch 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip	2009-06-28 11:05:28 -07:00
taskstats.c
test_kprobes.c
time.c
timeconst.pl
timer.c	timer: Avoid reading uninitialized data	2009-07-18 23:11:43 +02:00
tracepoint.c
tsacct.c
uid16.c
up.c
user_namespace.c
user.c	sched: delayed cleanup of user_struct	2009-06-15 21:30:23 -07:00
utsname_sysctl.c
utsname.c	utsns: extract creeate_uts_ns()	2009-06-18 13:03:55 -07:00
wait.c
workqueue.c