#VERIFICATION BIONIC $ uname -rv 4.15.0-92-generic #93-Ubuntu SMP Mon Mar 16 19:44:23 UTC 2020
Executing the reproducer found in [1] 100 times the bug does not reproduce. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1694779 ** Bug watch added: Red Hat Bugzilla #1694779 https://bugzilla.redhat.com/show_bug.cgi?id=1694779 ** Tags removed: verification-needed-bionic ** Tags added: verification-done-bionic -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1858834 Title: ipc/sem.c : process loops infinitely in exit_sem() Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Fix Committed Status in linux source package in Bionic: Fix Committed Status in linux source package in Disco: Fix Committed Status in linux source package in Eoan: Fix Committed Status in linux source package in Focal: Fix Released Bug description: [Description] Commit a97955844807 ("ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()") removes a lock that is needed. This leads to a process looping infinitely in exit_sem() and can also lead to a crash. [Test case] Using the reproducer found in [1] is fairly easy to reach a point where one of the child processes is looping infinitely in exit_sem between for(;;) and if (semid == -1) block, while it's trying to free its last sem_undo structure which has already been freed by freeary(). Once commit a97955844807 ("ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()") the issue is not reproducible any more. [Other] Patch submitted upstream : https://lkml.org/lkml/2019/12/11/1718 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1694779 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1858834/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
