[Bugme-janitors] [Bug 14416] Null pointer dereference in fs/pipe.c

bugzilla-daemon at bugzilla.kernel.org bugzilla-daemon at bugzilla.kernel.org
Sat Nov 7 00:45:30 PST 2009


http://bugzilla.kernel.org/show_bug.cgi?id=14416


Stas Sergeev <stsp at aknet.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |stsp at aknet.ru




--- Comment #4 from Stas Sergeev <stsp at aknet.ru>  2009-11-07 08:45:28 ---
Hi!

I just ocasionally went through the
forum where this problem was discussed.
People there had a concern whether the
proposed fix is the best possible solution.
They thought the proper locking must
make the checks like this unneeded.
This raised my curiosity, and after a
quick look at the code, I am wondering too.
If the open() happens on an already released
pipe, then can this be a missing synchronization
in VFS? Of course pipe.c can handle it on
its own, but how does VFS allow such a race?

-- 
Configure bugmail: http://bugzilla.kernel.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the Bugme-janitors mailing list