Message-ID: <3DA5BBB2.67435F2D@tv-sign.ru>
Date: Thu, 10 Oct 2002 21:41:06 +0400
From: Oleg Nesterov <oleg@tv-sign.ru>
MIME-Version: 1.0
To: linux-kernel@vger.kernel.org
CC: Ingo Molnar <mingo@elte.hu>
Subject: BUG: de_thread()
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 853
Lines: 23

Hello.

Suppose process P in thread group was cloned _without_
CLONE_DETACHED flag. Then another thread, group_leader
for simplicity, does exec and calls de_thread(). It kills
P via _broadcast_thread_group(). While doing do_exit(),
P skips release_task(), because its exit_signal != -1,
and becomes TASK_ZOMBIE.

Then leader calls schedule() with TASK_UNINTERRUPTIBLE
in while(oldsig->count > 1) {...} and sleeps forever,
because nobody can do wake_up_process(sig->group_exit_task).

Sorry if i missed something, i have no machine to test
development kernel, so i can only speculate looking at
source.

Oleg.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/