Martijn Coenen b6c6212514 ANDROID: binder: synchronize_rcu() when using POLLFREE. ...

commit 5eeb2ca02a upstream.

To prevent races with ep_remove_waitqueue() removing the
waitqueue at the same time.

Reported-by: syzbot+a2a3c4909716e271487e@syzkaller.appspotmail.com
Signed-off-by: Martijn Coenen <maco@android.com>
Cc: stable <stable@vger.kernel.org> # 4.14+
Signed-off-by: Mattias Nissler <mnissler@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-10-07 18:53:19 +02:00

..

binder_trace.h

staging: android: binder: move to the "real" part of the kernel

2014-10-20 10:30:15 +08:00

binder.c

ANDROID: binder: synchronize_rcu() when using POLLFREE.

2019-10-07 18:53:19 +02:00

Kconfig

staging: android: binder: move to the "real" part of the kernel

2014-10-20 10:30:15 +08:00

Makefile

staging: android: binder: move to the "real" part of the kernel

2014-10-20 10:30:15 +08:00