tree 050e09c752c2b0f6045f85247c64890cf5d4ec48
parent 6706125e291bd3dddd269e043323a6ab93ccd5fb
author Mike Galbraith <efault@gmx.de> 1292508592 +0100
committer Ingo Molnar <mingo@elte.hu> 1294150234 +0100

sched, autogroup: Fix potential access to freed memory

Oleg pointed out that the /proc interface kref_get() useage may race with
the final put during autogroup_move_group().  A signal->autogroup assignment
may be in flight when the /proc interface dereference, leaving them taking
a reference to an already dead group.

Reported-by: Oleg Nesterov <oleg@redhat.com>
Signed-off-by: Mike Galbraith <efault@gmx.de>
Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
LKML-Reference: <1292508592.5940.28.camel@maggy.simson.net>
Signed-off-by: Ingo Molnar <mingo@elte.hu>