> +void mmu_notifier_release(struct mm_struct *mm)
...
> +             hlist_for_each_entry_safe_rcu(mn, n, t,
> +                                       &mm->mmu_notifier.head, hlist) {
> +                     if (mn->ops->release)
> +                             mn->ops->release(mn, mm);
> +                     hlist_del(&mn->hlist);

USE_AFTER_FREE!!!  I made this same comment as well as other relavent
comments last week.


Robin

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
kvm-devel mailing list
kvm-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/kvm-devel

Reply via email to