Commit 4502403d authored Mar 16, 2013 by Dan Carpenter Committed by James Morris Mar 19, 2013

selinux: use GFP_ATOMIC under spin_lock



The call tree here is:

sk_clone_lock()              <- takes bh_lock_sock(newsk);
xfrm_sk_clone_policy()
__xfrm_sk_clone_policy()
clone_policy()               <- uses GFP_ATOMIC for allocations
security_xfrm_policy_clone()
security_ops->xfrm_policy_clone_security()
selinux_xfrm_policy_clone()

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: stable@kernel.org
Signed-off-by: James Morris <james.l.morris@oracle.com>

parent a937536b

security/selinux/xfrm.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -310,7 +310,7 @@ int selinux_xfrm_policy_clone(struct xfrm_sec_ctx *old_ctx,

		if (old_ctx) {
		new_ctx = kmalloc(sizeof(*old_ctx) + old_ctx->ctx_len,
		GFP_KERNEL);
		GFP_ATOMIC);
		if (!new_ctx)
		return -ENOMEM;

Admin message