UPSTREAM: ANDROID: binder: synchronize_rcu() when using POLLFREE.
authorMartijn Coenen <maco@android.com>
Fri, 16 Feb 2018 08:47:15 +0000 (09:47 +0100)
committerDanny Wood <danwood76@gmail.com>
Fri, 8 Nov 2019 12:03:13 +0000 (12:03 +0000)
commitc0bf025b856adc38e5cabfcd37736e126f7bb593
tree67397323869db9ab16deb49585ab85c68ad9e1b2
parente0391afedbf84e9cd74ca5adcf0f28ca0a963e77
UPSTREAM: ANDROID: binder: synchronize_rcu() when using POLLFREE.

To prevent races with ep_remove_waitqueue() removing the
waitqueue at the same time.

Reported-by: syzbot+a2a3c4909716e271487e@syzkaller.appspotmail.com
Signed-off-by: Martijn Coenen <maco@android.com>
Cc: stable <stable@vger.kernel.org> # 4.14+
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 5eeb2ca02a2f6084fc57ae5c244a38baab07033a)

Change-Id: Ia0089448079c78d0ab0b57303faf838e9e5ee797
drivers/android/binder.c