android_kernel_motorola_sm6225/fs/notify/inotify
Pavel Emelyanov b3b38d842f inotify: don't leak user struct on inotify release
inotify_new_group() receives a get_uid-ed user_struct and saves the
reference on group->inotify_data.user.  The problem is that free_uid() is
never called on it.

Issue seem to be introduced by 63c882a0 (inotify: reimplement inotify
using fsnotify) after 2.6.30.

Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Eric Paris <eparis@parisplace.org>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Eric Paris <eparis@redhat.com>
2010-05-14 11:53:36 -04:00
..
inotify.c fsnotify: unified filesystem notification backend 2009-06-11 14:57:52 -04:00
inotify.h inotify: inotify_destroy_mark_entry could get called twice 2009-06-19 12:42:48 -04:00
inotify_fsnotify.c inotify: don't leak user struct on inotify release 2010-05-14 11:53:36 -04:00
inotify_user.c inotify: race use after free/double free in inotify inode marks 2010-05-14 11:52:57 -04:00
Kconfig Inotify: undefined reference to `anon_inode_getfd' 2010-05-12 11:03:40 -04:00
Makefile inotify: reimplement inotify using fsnotify 2009-06-11 14:57:54 -04:00