Messages in this thread Patch in this message | | | Date | Fri, 17 May 2013 15:03:02 +0800 | From | Li Zefan <> | Subject | [PATCH 1/9] Revert "memcg: avoid dangling reference count in creation failure." |
| |
This reverts commit e4715f01be697a3730c78f8ffffb595591d6a88c
mem_cgroup_put is hierarchy aware so mem_cgroup_put(memcg) already drops an additional reference from all parents so the additional mem_cgrroup_put(parent) potentially causes use-after-free.
Cc: <stable@vger.kernel.org> # 3.9.x Signed-off-by: Michal Hocko <mhocko@suse.cz> Signed-off-by: Li Zefan <lizefan@huawei.com> Acked-by: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com> --- mm/memcontrol.c | 2 -- 1 file changed, 2 deletions(-)
diff --git a/mm/memcontrol.c b/mm/memcontrol.c index cb1c9de..5918e90 100644 --- a/mm/memcontrol.c +++ b/mm/memcontrol.c @@ -6297,8 +6297,6 @@ mem_cgroup_css_online(struct cgroup *cont) * call __mem_cgroup_free, so return directly */ mem_cgroup_put(memcg); - if (parent->use_hierarchy) - mem_cgroup_put(parent); } return error; } -- 1.8.0.2
| |