On Tue, 19 Mar 2013 13:31:18 +0400 Vladimir Davydov <vdavy...@parallels.com> 
wrote:
> mnt_drop_write() must be called only if mnt_want_write() succeeded,
> otherwise the mnt_writers counter will diverge.
> 
> ...
>
> --- a/ipc/mqueue.c
> +++ b/ipc/mqueue.c
> @@ -840,7 +840,8 @@ out_putfd:
>               fd = error;
>       }
>       mutex_unlock(&root->d_inode->i_mutex);
> -     mnt_drop_write(mnt);
> +     if (!ro)
> +             mnt_drop_write(mnt);
>  out_putname:
>       putname(name);
>       return fd;

huh, that's been there for a while.  What were the runtime-visible
effects of the bug?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Reply via email to