ipc/sem.c: fully initialize sem_array before making it visible
authorManfred Spraul <manfred@colorfullife.com>
Tue, 2 Dec 2014 23:59:34 +0000 (15:59 -0800)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 13 Oct 2015 02:46:12 +0000 (03:46 +0100)
commit0bdf1e820160cdeb16cba1c5ea6892ae982a6587
treeb073fde042d91d45106fe77871e4595e415a6537
parent987ad6eef35223b149baf453171b74917c372cbc
ipc/sem.c: fully initialize sem_array before making it visible

commit e8577d1f0329d4842e8302e289fb2c22156abef4 upstream.

ipc_addid() makes a new ipc identifier visible to everyone.  New objects
start as locked, so that the caller can complete the initialization
after the call.  Within struct sem_array, at least sma->sem_base and
sma->sem_nsems are accessed without any locks, therefore this approach
doesn't work.

Thus: Move the ipc_addid() to the end of the initialization.

Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
Reported-by: Rik van Riel <riel@redhat.com>
Acked-by: Rik van Riel <riel@redhat.com>
Acked-by: Davidlohr Bueso <dave@stgolabs.net>
Acked-by: Rafael Aquini <aquini@redhat.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
[bwh: Backported to 3.2:
 - Adjust context
 - The error path being moved looks a little different]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
ipc/sem.c