diff options
| author | Martin Schwidefsky <schwidefsky@de.ibm.com> | 2014-12-01 17:05:35 (GMT) |
|---|---|---|
| committer | Martin Schwidefsky <schwidefsky@de.ibm.com> | 2014-12-08 08:42:35 (GMT) |
| commit | 4b4ee3ee0beb4f39efe5eb9581f07bddc4201240 (patch) | |
| tree | 97498f0f0b3521e91cd90f02bf5ea6efb436b861 | |
| parent | 8461b63ca01d125a245a0d0fb4821ea0656e5053 (diff) | |
| download | linux-4b4ee3ee0beb4f39efe5eb9581f07bddc4201240.tar.xz | |
s390/simd: clear vector register pointer on fork/clone
The copy_thread function fails to reset the p->thread.vxrs pointer.
This causes the child to use the same vector register save area,
causing both data corruptions and multiple frees of the memory for
the save area after the tasks sharing the save area terminate.
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
| -rw-r--r-- | arch/s390/kernel/process.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/arch/s390/kernel/process.c b/arch/s390/kernel/process.c index 4192dfd..aa7a839 100644 --- a/arch/s390/kernel/process.c +++ b/arch/s390/kernel/process.c @@ -153,6 +153,7 @@ int copy_thread(unsigned long clone_flags, unsigned long new_stackp, save_fp_ctl(&p->thread.fp_regs.fpc); save_fp_regs(p->thread.fp_regs.fprs); p->thread.fp_regs.pad = 0; + p->thread.vxrs = NULL; /* Set a new TLS ? */ if (clone_flags & CLONE_SETTLS) { unsigned long tls = frame->childregs.gprs[6]; |