diff options
| author | Roland Dreier <rolandd@cisco.com> | 2005-09-26 13:01:03 -0700 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2005-09-26 13:01:03 -0700 |
| commit | 63c47c286d062d93e0501d60797274c84a587e97 (patch) | |
| tree | 7be7c3402e456ed857c5041cd5ee6a699f772701 /drivers/infiniband/core/uverbs.h | |
| parent | 44dd823b00fa64bf01e53557d28555011f122a88 (diff) | |
| download | kernel_samsung_smdk4412-63c47c286d062d93e0501d60797274c84a587e97.zip kernel_samsung_smdk4412-63c47c286d062d93e0501d60797274c84a587e97.tar.gz kernel_samsung_smdk4412-63c47c286d062d93e0501d60797274c84a587e97.tar.bz2 | |
[IB] uverbs: Close some exploitable races
Al Viro pointed out that the current IB userspace verbs interface
allows userspace to cause mischief by closing file descriptors before
we're ready, or issuing the same command twice at the same time. This
patch closes those races, and fixes other obvious problems such as a
module reference leak.
Some other interface bogosities will require an ABI change to fix
properly, so I'm deferring those fixes until 2.6.15.
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/infiniband/core/uverbs.h')
| -rw-r--r-- | drivers/infiniband/core/uverbs.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/drivers/infiniband/core/uverbs.h b/drivers/infiniband/core/uverbs.h index b1897be..cc12434 100644 --- a/drivers/infiniband/core/uverbs.h +++ b/drivers/infiniband/core/uverbs.h @@ -69,6 +69,7 @@ struct ib_uverbs_event_file { struct ib_uverbs_file { struct kref ref; + struct semaphore mutex; struct ib_uverbs_device *device; struct ib_ucontext *ucontext; struct ib_event_handler event_handler; |