Commit ddca3b80 authored by Guillaume Autran's avatar Guillaume Autran Committed by Linus Torvalds

[PATCH] ppc32: fix destroy_context() race condition

Fix for a race condition when a task gets preempted by another task while
executing the destroy_context(...) in a FEW_CONTEXTS environment.
mm->context == NO_CONTEXT but the context_map may indicate all contexts are
in use.

The solution to this problem is to disable kernel preemption while
destroying a MMU context.
Signed-off-by: default avatarGuillaume Autran <gautran@mrv.com>
Acked-by: default avatarBenjamin Herrenschmidt <benh@kernel.crashing.org>
Signed-off-by: default avatarAndrew Morton <akpm@osdl.org>
Signed-off-by: default avatarLinus Torvalds <torvalds@osdl.org>
parent 88bd5121
...@@ -149,6 +149,7 @@ static inline void get_mmu_context(struct mm_struct *mm) ...@@ -149,6 +149,7 @@ static inline void get_mmu_context(struct mm_struct *mm)
*/ */
static inline void destroy_context(struct mm_struct *mm) static inline void destroy_context(struct mm_struct *mm)
{ {
preempt_disable();
if (mm->context != NO_CONTEXT) { if (mm->context != NO_CONTEXT) {
clear_bit(mm->context, context_map); clear_bit(mm->context, context_map);
mm->context = NO_CONTEXT; mm->context = NO_CONTEXT;
...@@ -156,6 +157,7 @@ static inline void destroy_context(struct mm_struct *mm) ...@@ -156,6 +157,7 @@ static inline void destroy_context(struct mm_struct *mm)
atomic_inc(&nr_free_contexts); atomic_inc(&nr_free_contexts);
#endif #endif
} }
preempt_enable();
} }
static inline void switch_mm(struct mm_struct *prev, struct mm_struct *next, static inline void switch_mm(struct mm_struct *prev, struct mm_struct *next,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment