Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 059b64d5 authored by qctecmdr Service's avatar qctecmdr Service Committed by Gerrit - the friendly Code Review server
Browse files

Merge "sched/core: Fix use after free issue in is_sched_lib_based_app()"

parents d6e2d212 0e6ca164
Loading
Loading
Loading
Loading
+7 −4
Original line number Diff line number Diff line
@@ -4917,6 +4917,7 @@ static inline bool is_sched_lib_based_app(pid_t pid)
	char path_buf[LIB_PATH_LENGTH];
	bool found = false;
	struct task_struct *p;
	struct mm_struct *mm;

	if (strnlen(sched_lib_name, LIB_PATH_LENGTH) == 0)
		return false;
@@ -4933,11 +4934,12 @@ static inline bool is_sched_lib_based_app(pid_t pid)
	get_task_struct(p);
	rcu_read_unlock();

	if (!p->mm)
	mm = get_task_mm(p);
	if (!mm)
		goto put_task_struct;

	down_read(&p->mm->mmap_sem);
	for (vma = p->mm->mmap; vma ; vma = vma->vm_next) {
	down_read(&mm->mmap_sem);
	for (vma = mm->mmap; vma ; vma = vma->vm_next) {
		if (vma->vm_file && vma->vm_flags & VM_EXEC) {
			name = d_path(&vma->vm_file->f_path,
					path_buf, LIB_PATH_LENGTH);
@@ -4953,7 +4955,8 @@ static inline bool is_sched_lib_based_app(pid_t pid)
	}

release_sem:
	up_read(&p->mm->mmap_sem);
	up_read(&mm->mmap_sem);
	mmput(mm);
put_task_struct:
	put_task_struct(p);
	return found;