From: Eric Dumazet <eric.dumazet@xxxxxxxxx> Date: Fri, 18 Feb 2011 09:54:38 +0100 > From: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> > > Eric W. Biderman and Michal Hocko reported various memory corruptions > that we suspected to be related to a LIST head located on stack, that > was manipulated after thread left function frame (and eventually exited, > so its stack was freed and reused). > > Eric Dumazet suggested the problem was probably coming from commit > 443457242beb (net: factorize > sync-rcu call in unregister_netdevice_many) > > This patch fixes __dev_close() and dev_close() to properly deinit their > respective LIST_HEAD(single) before exiting. > > References: https://lkml.org/lkml/2011/2/16/304 > References: https://lkml.org/lkml/2011/2/14/223 > > Reported-by: Michal Hocko <mhocko@xxxxxxx> > Reported-by: Eric W. Biderman <ebiderman@xxxxxxxxxxxx> > Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> > Signed-off-by: Eric Dumazet <eric.dumazet@xxxxxxxxx> Applied. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxxx For more info on Linux MM, see: http://www.linux-mm.org/ . Fight unfair telecom internet charges in Canada: sign http://stopthemeter.ca/ Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>