Unverified Commit 2363298a authored Mar 20, 2024 by openeuler-ci-bot Committed by Gitee Mar 20, 2024

!5336 binder: fix race between mmput() and do_exit()

Merge Pull Request from: @ci-robot 
 
PR sync from: Zheng Yejian <zhengyejian1@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/QHCW5AE5JVX3B44XCA3TGY7OIGE7TAQV/ 
 
https://gitee.com/src-openeuler/kernel/issues/I99JWJ 
 
Link:https://gitee.com/openeuler/kernel/pulls/5336

 

Reviewed-by: Xu Kuohai <xukuohai@huawei.com>
Reviewed-by: Liu YongQiang <liuyongqiang13@huawei.com>
Signed-off-by: Zhang Changzhong <zhangchangzhong@huawei.com>

parents a09536c5 202a54d4

drivers/android/binder_alloc.c

+2 −2

Original line number	Diff line number	Diff line
		@@ -281,7 +281,7 @@ static int binder_update_page_range(struct binder_alloc *alloc, int allocate,
		}
		if (mm) {
		up_read(&mm->mmap_sem);
		mmput(mm);
		mmput_async(mm);
		}
		return 0;

		@@ -314,7 +314,7 @@ static int binder_update_page_range(struct binder_alloc *alloc, int allocate,
		err_no_vma:
		if (mm) {
		up_read(&mm->mmap_sem);
		mmput(mm);
		mmput_async(mm);
		}
		return vma ? -ENOMEM : -ESRCH;
		}