• Andrew Morton's avatar
    [PATCH] eventpoll: fix possible use-after-free · 319a0865
    Andrew Morton authored
    From: Davide Libenzi <davidel@xmailserver.org>
    
    After the ep_remove() the "epi" is given back to the cache, so "epi->ep"
    might become invalid.  It was not cought by my tests because the element
    wasn't immediately reused (and because I was using a single epoll fd, so
    the "ep" item remained the same).
    319a0865
eventpoll.c 46 KB