zoran: racy refcount handling in vm_ops ->open()/->close()
authorAl Viro <viro@zeniv.linux.org.uk>
Thu, 23 May 2013 08:38:22 +0000 (04:38 -0400)
committerAl Viro <viro@zeniv.linux.org.uk>
Fri, 31 May 2013 19:33:32 +0000 (15:33 -0400)
commit4ad1f70ebcdb69393ce083f514bf4a4a3a3e65cb
tree686f96672a8432dffe178a155891e1806e083713
parent448293aadb54ab38b9c053bf9f1eecafdc0ed214
zoran: racy refcount handling in vm_ops ->open()/->close()

worse, we lock ->resource_lock too late when we are destroying the
final clonal VMA; the check for lack of other mappings of the same
opened file can race with mmap().

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
drivers/media/pci/zoran/zoran.h
drivers/media/pci/zoran/zoran_driver.c