Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965128AbbLRIqS (ORCPT ); Fri, 18 Dec 2015 03:46:18 -0500 Received: from relay1.mentorg.com ([192.94.38.131]:62878 "EHLO relay1.mentorg.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S964903AbbLRIqQ (ORCPT ); Fri, 18 Dec 2015 03:46:16 -0500 From: To: CC: , , , , , , , , , , Bhuvanesh Surachari , Bhuvanesh Surachari , Andy Lowe Subject: [PATCH] futex: Prevent pi_state from double freeing in case of error Date: Fri, 18 Dec 2015 14:13:43 +0530 Message-ID: <1450428223-7655-1-git-send-email-Bhuvanesh_Surachari@mentor.com> X-Mailer: git-send-email 1.7.9.5 MIME-Version: 1.0 Content-Type: text/plain Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 982 Lines: 33 From: Bhuvanesh Surachari In case of error from rt_mutex_start_proxy_lock pi_state is freed twice in futex_requeue function. Hence removing free_pi_state in else branch and branching to the location where pi_state is freed. Signed-off-by: Bhuvanesh Surachari Signed-off-by: Andy Lowe --- kernel/futex.c | 1 - 1 file changed, 1 deletion(-) diff --git a/kernel/futex.c b/kernel/futex.c index 684d754..264b3f2 100644 --- a/kernel/futex.c +++ b/kernel/futex.c @@ -1815,7 +1815,6 @@ retry_private: } else if (ret) { /* -EDEADLK */ this->pi_state = NULL; - free_pi_state(pi_state); goto out_unlock; } } -- 1.7.9.5 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/