diff options
| -rw-r--r-- | fs/proc/base.c | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/fs/proc/base.c b/fs/proc/base.c index f3c2e4085fed..175db258942f 100644 --- a/fs/proc/base.c +++ b/fs/proc/base.c | |||
| @@ -234,19 +234,19 @@ static int check_mem_permission(struct task_struct *task) | |||
| 234 | 234 | ||
| 235 | struct mm_struct *mm_for_maps(struct task_struct *task) | 235 | struct mm_struct *mm_for_maps(struct task_struct *task) |
| 236 | { | 236 | { |
| 237 | struct mm_struct *mm = get_task_mm(task); | 237 | struct mm_struct *mm; |
| 238 | 238 | ||
| 239 | if (mm && mm != current->mm) { | 239 | if (mutex_lock_killable(&task->cred_guard_mutex)) |
| 240 | /* | 240 | return NULL; |
| 241 | * task->mm can be changed before security check, | 241 | |
| 242 | * in that case we must notice the change after. | 242 | mm = get_task_mm(task); |
| 243 | */ | 243 | if (mm && mm != current->mm && |
| 244 | if (!ptrace_may_access(task, PTRACE_MODE_READ) || | 244 | !ptrace_may_access(task, PTRACE_MODE_READ)) { |
| 245 | mm != task->mm) { | 245 | mmput(mm); |
| 246 | mmput(mm); | 246 | mm = NULL; |
| 247 | mm = NULL; | ||
| 248 | } | ||
| 249 | } | 247 | } |
| 248 | mutex_unlock(&task->cred_guard_mutex); | ||
| 249 | |||
| 250 | return mm; | 250 | return mm; |
| 251 | } | 251 | } |
| 252 | 252 | ||
