namespaces?: bug at mm/slub.c:2750

David Howells dhowells at redhat.com
Wed Feb 11 09:02:44 PST 2009


Serge E. Hallyn <serue at us.ibm.com> wrote:

>  static void uid_hash_remove(struct user_struct *up)
>  {
> +	put_user_ns(up->user_ns);
>  	hlist_del_init(&up->uidhash_node);
>  }

Don't you need to do the hlist_del_init() first?  Otherwise, mightn't the
put_user_ns() cause the namespace to be freed before hlist_del_init() removes
the user_struct from it?

David


More information about the Containers mailing list