Messages in this thread | | | Date | Fri, 28 Mar 2003 07:25:07 +0100 | From | Manfred Spraul <> | Subject | Re: task_struct slab cache use after free in 2.5.66 |
| |
Zwane wrote:
>On Thu, 27 Mar 2003, Andrew Morton wrote: > >> That's the second report of this. Someone did a put_task_struct against a >> freed task_struct. I'll cook up a debug patch to trap it. Something like >> this: > >Well there is also the detach_pid bug which suddenly vanished... I'm not >aware of anyone sending a patch for that (but i can't be certain i havent >been keeping up with lkml lately). I posted some debug information for >that one about a week ago: > >Pine.LNX.4.50.0303221152460.18911-100000@montezuma.mastecende.com > >Manfred?
I didn't send a patch. One thing I noticed from reading zwane's bug report is that the reference count of the task structure was off by at least 3:
__detach_pid(p, PIDTYPE_PGID)
failed because the task structure was already filled with slab poison.
-- Manfred
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |