On Mon, 8 Oct 2012, Dave Jones wrote: > If pol->mode was poisoned, that smells like we have a race where policy is getting freed > while another process is reading it. > > Am I missing something, or is there no locking around that at all ? > The only thing that is held during the read() is a reference to the task_struct so it doesn't disappear from under us. The protection needed for a task's mempolicy, however, is task_lock() and that is not held. -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx";> email@xxxxxxxxx </a>