summaryrefslogtreecommitdiffstats
path: root/net/wimax
diff options
context:
space:
mode:
authorTom Herbert <tom@herbertland.com>2015-08-05 09:39:27 -0700
committerDavid S. Miller <davem@davemloft.net>2015-08-07 15:56:56 -0700
commit10e4ea75149d11883a9e04c3b32ee1d7600d481e (patch)
tree4cf760912a8c9e3447619d6cdaeeac0835e9eaae /net/wimax
parente05176a3283822bd32a1f3d929ce2050232299a8 (diff)
downloadlinux-10e4ea75149d11883a9e04c3b32ee1d7600d481e.tar.bz2
net: Fix race condition in store_rps_map
There is a race condition in store_rps_map that allows jump label count in rps_needed to go below zero. This can happen when concurrently attempting to set and a clear map. Scenario: 1. rps_needed count is zero 2. New map is assigned by setting thread, but rps_needed count _not_ yet incremented (rps_needed count still zero) 2. Map is cleared by second thread, old_map set to that just assigned 3. Second thread performs static_key_slow_dec, rps_needed count now goes negative Fix is to increment or decrement rps_needed under the spinlock. Signed-off-by: Tom Herbert <tom@herbertland.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/wimax')
0 files changed, 0 insertions, 0 deletions