unfuck proc_sysctl ->d_compare()
authorAl Viro <viro@zeniv.linux.org.uk>
Tue, 8 Mar 2011 06:25:28 +0000 (01:25 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Tue, 8 Mar 2011 07:22:27 +0000 (02:22 -0500)
commitdfef6dcd35cb4a251f6322ca9b2c06f0bb1aa1f4
tree65e8a25d4ed913658db35c4b97ab0a021c2124eb
parent1858efd471624ecb37e6b5462cab8076f47d1cee
unfuck proc_sysctl ->d_compare()

a) struct inode is not going to be freed under ->d_compare();
however, the thing PROC_I(inode)->sysctl points to just might.
Fortunately, it's enough to make freeing that sucker delayed,
provided that we don't step on its ->unregistering, clear
the pointer to it in PROC_I(inode) before dropping the reference
and check if it's NULL in ->d_compare().

b) I'm not sure that we *can* walk into NULL inode here (we recheck
dentry->seq between verifying that it's still hashed / fetching
dentry->d_inode and passing it to ->d_compare() and there's no
negative hashed dentries in /proc/sys/*), but if we can walk into
that, we really should not have ->d_compare() return 0 on it!
Said that, I really suspect that this check can be simply killed.
Nick?

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
fs/proc/inode.c
fs/proc/proc_sysctl.c
include/linux/sysctl.h
kernel/sysctl.c