futex: Always cleanup owner tid in unlock_pi
authorThomas Gleixner <tglx@linutronix.de>
Tue, 3 Jun 2014 12:27:07 +0000 (12:27 +0000)
committerLinus Torvalds <torvalds@linux-foundation.org>
Thu, 5 Jun 2014 19:31:07 +0000 (12:31 -0700)
commit13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e
tree8789bcd2b04e6dbceda2377ca67575e5fa618876
parentb3eaa9fc5cd0a4d74b18f6b8dc617aeaf1873270
futex: Always cleanup owner tid in unlock_pi

If the owner died bit is set at futex_unlock_pi, we currently do not
cleanup the user space futex.  So the owner TID of the current owner
(the unlocker) persists.  That's observable inconsistant state,
especially when the ownership of the pi state got transferred.

Clean it up unconditionally.

Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Cc: Kees Cook <keescook@chromium.org>
Cc: Will Drewry <wad@chromium.org>
Cc: Darren Hart <dvhart@linux.intel.com>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/futex.c