lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 06 Mar 2013 17:23:11 +0100 From: Jiri Slaby <jslaby@...e.cz> To: Peter Hurley <peter@...leysoftware.com> CC: jhovold@...il.com, Greg Kroah-Hartman <gregkh@...uxfoundation.org>, Alan Stern <stern@...land.harvard.edu>, USB list <linux-usb@...r.kernel.org>, linux-serial@...r.kernel.org, Alan Cox <alan@...rguk.ukuu.org.uk>, LKML <linux-kernel@...r.kernel.org> Subject: Re: [Fwd: [PATCH v2 0/4] TTY: port hangup and close fixes] On 03/05/2013 11:32 PM, Peter Hurley wrote: >> So I'm thinking about >> something like this: >> >> if (port->tty) >> set_bit(TTY_IO_ERROR, &port->tty->flags); >> tty = port->tty; <=== take a snapshot >> spin_unlock_irqrestore(&port->lock, flags); >> tty_port_shutdown(port, tty); <=== use the snapshot >> set_tty_port(port, NULL); <=== put kref on that tty > > Yeah, that's better. But still not correct. The tty can be invalid (freed) at the time tty_port_shutdown is called. We should take a real reference inside the lock and put the reference explicitly after the call. -- js suse labs -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists