On Mon, Jun 05, 2023 at 09:04:44PM +0800, Zou Cao wrote:
> TeamID: B1486294
>
> when fork, cset will be increased by commit "ef2c41cf38a7", the refcnt will
> be decrease by child exit, but when failed in fork(), this refcnt will
> be lost decrease in cgroup_cancel_fork as follow:
>
> copy_process
> |
> cgroup_can_fork // increase the css refcount
> ......
> spin_lock_irq(&css_set_lock);
> cset = task_css_setcurrent);
> get_css_set(cset);
> spin_unlock_irq&css_set_lock);
> ......
> |
> goto cgroup_cancel_fork // if failed in copy_process
> |
> cgroup_cancel_fork // lost the decrease refcount if flag not CLONE_INTO_CGROUP
>
> Fixes: ef2c41cf38a7 ("clone3: allow spawning processes into cgroups")
> Signed-off-by: Zou Cao <zoucao@xxxxxxxxxxxx>
Is this the same bug fixed by the following commit?
https://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup.git/commit/?h=for-6.4-fixes&id=2bd110339288c18823dcace602b63b0d8627e520
Thanks.
--
tejun
