From: Eric W. Biederman <ebiederm@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Signed-off-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxxxxxxxx>
---
fs/eventpoll.c | 39 ++++++++++++++++++++++++++++++++-------
1 files changed, 32 insertions(+), 7 deletions(-)
diff --git a/fs/eventpoll.c b/fs/eventpoll.c
index a89f370..eabb167 100644
--- a/fs/eventpoll.c
+++ b/fs/eventpoll.c
@@ -627,8 +627,13 @@ static int ep_read_events_proc(struct eventpoll *ep, struct list_head *head,
struct epitem *epi, *tmp;
list_for_each_entry_safe(epi, tmp, head, rdllink) {
- if (epi->ffd.file->f_op->poll(epi->ffd.file, NULL) &
- epi->event.events)
+ int events = DEAD_POLLMASK;
+
+ if (file_hotplug_read_trylock(epi->ffd.file)) {
+ events = epi->ffd.file->f_op->poll(epi->ffd.file, NULL);
+ file_hotplug_read_unlock(epi->ffd.file);
+ }
+ if (events & epi->event.events)
return POLLIN | POLLRDNORM;
else {
/*
@@ -1060,8 +1065,12 @@ static int ep_send_events_proc(struct eventpoll *ep, struct list_head *head,
list_del_init(&epi->rdllink);
- revents = epi->ffd.file->f_op->poll(epi->ffd.file, NULL) &
- epi->event.events;
+ revents = DEAD_POLLMASK;
+ if (file_hotplug_read_trylock(epi->ffd.file)) {
+ revents = epi->ffd.file->f_op->poll(epi->ffd.file, NULL);
+ file_hotplug_read_unlock(epi->ffd.file);
+ }
+ revents &= epi->event.events;
/*
* If the event mask intersect the caller-requested one,
@@ -1248,10 +1257,17 @@ SYSCALL_DEFINE4(epoll_ctl, int, epfd, int, op, int, fd,
if (!tfile)
goto error_fput;
+ error = -EIO;
+ if (!file_hotplug_read_trylock(file))
+ goto error_tgt_fput;
+
+ if (!file_hotplug_read_trylock(tfile))
+ goto error_file_unlock;
+
/* The target file descriptor must support poll */
error = -EPERM;
if (!tfile->f_op || !tfile->f_op->poll)
- goto error_tgt_fput;
+ goto error_tgt_unlock;
/*
* We have to check that the file structure underneath the file descriptor
@@ -1260,7 +1276,7 @@ SYSCALL_DEFINE4(epoll_ctl, int, epfd, int, op, int, fd,
*/
error = -EINVAL;
if (file == tfile || !is_file_epoll(file))
- goto error_tgt_fput;
+ goto error_tgt_unlock;
/*
* At this point it is safe to assume that the "private_data" contains
@@ -1302,6 +1318,10 @@ SYSCALL_DEFINE4(epoll_ctl, int, epfd, int, op, int, fd,
}
mutex_unlock(&ep->mtx);
+error_tgt_unlock:
+ file_hotplug_read_unlock(tfile);
+error_file_unlock:
+ file_hotplug_read_unlock(file);
error_tgt_fput:
fput(tfile);
error_fput:
@@ -1338,13 +1358,16 @@ SYSCALL_DEFINE4(epoll_wait, int, epfd, struct epoll_event __user *, events,
if (!file)
goto error_return;
+ error = -EIO;
+ if (!file_hotplug_read_trylock(file))
+ goto error_fput;
/*
* We have to check that the file structure underneath the fd
* the user passed to us _is_ an eventpoll file.
*/
error = -EINVAL;
if (!is_file_epoll(file))
- goto error_fput;
+ goto error_unlock;
/*
* At this point it is safe to assume that the "private_data" contains
@@ -1355,6 +1378,8 @@ SYSCALL_DEFINE4(epoll_wait, int, epfd, struct epoll_event __user *, events,
/* Time to fish for events ... */
error = ep_poll(ep, events, maxevents, timeout);
+error_unlock:
+ file_hotplug_read_unlock(file);
error_fput:
fput(file);
error_return:
--
1.6.3.1.54.g99dd.dirty
--
To unsubscribe from this list: send the line "unsubscribe linux-pci" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
