Fix reparenting in exit.c
PATCH 1/1 Fix reparenting in exit.c
The code that attempts to reparent the children of a dying task to another task in the thread group has a nasty race condition. Since it is called early in the exit sequence, the task it picks as the new parent could also be exiting. This has the effect of reparenting the task to a zombie, and eventually the parent pointer will point to re-used memory.
Given that this feature is unused and would be difficult to fix, I believe it should be removed entirely and it should just always reparent to init.
The patch to change this is below.
Dave McCracken
======================================================================
Dave McCracken IBM Linux Base Kernel Team 1-512-838-3059
[email protected] T/L 678-3059
---------------------
kernel/exit.c +0 -0
@@ -149,28 +149,21 @@
}
/*
- * When we die, we re-parent all our children.
- * Try to give them to another thread in our process
- * group, and if no such member exists, give it to
+ * When we die, we re-parent all our children to
* the global child reaper process (ie "init")
*/
static inline void forget_original_parent(struct task_struct * father) {
- struct task_struct * p, *reaper;
+ struct task_struct * p;
read_lock(&tasklist_lock);
- /* Next in our thread group */
- reaper = next_thread(father);
- if (reaper == father)
- reaper = child_reaper;
-
for_each_task(p) {
if (p->p_opptr == father) {
/* We dont want people slaying init */
p->exit_signal = SIGCHLD;
p->self_exec_id++;
- p->p_opptr = reaper;
+ p->p_opptr = child_reaper;
if (p->pdeath_signal) send_sig(p->pdeath_signal, p, 0);
}
}