linux-stable-rt/arch/um/drivers
Jeff Dike 0a6d3a2a38 uml: fix request->sector update
It is theoretically possible for a request to finish and be freed between
writing it to the I/O thread and updating the sector count.  In this case, the
update will dereference a freed pointer.

To avoid this, I delay the update until processing the next sg segment, when
the request pointer is known to be good.

Signed-off-by: Jeff Dike <jdike@linux.intel.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-07-16 09:05:38 -07:00
..
Makefile
chan_kern.c
chan_user.c
cow.h
cow_sys.h
cow_user.c
daemon.h
daemon_kern.c
daemon_user.c
fd.c
harddog_kern.c
harddog_user.c
hostaudio_kern.c
line.c uml: get declaration of simple_strtoul 2007-06-08 17:23:33 -07:00
mcast.h
mcast_kern.c
mcast_user.c
mconsole_kern.c
mconsole_user.c
mmapper_kern.c
net_kern.c
net_user.c
null.c
pcap_kern.c
pcap_user.c
pcap_user.h
port.h
port_kern.c
port_user.c
pty.c
random.c
slip.h
slip_common.c
slip_common.h
slip_kern.c
slip_user.c
slirp.h
slirp_kern.c
slirp_user.c
ssl.c
ssl.h
stderr_console.c uml: get declaration of simple_strtoul 2007-06-08 17:23:33 -07:00
stdio_console.c
stdio_console.h
tty.c
ubd_kern.c uml: fix request->sector update 2007-07-16 09:05:38 -07:00
ubd_user.c
xterm.c
xterm.h
xterm_kern.c