[PATCH] Clean up subthread exec (CAN-2005-1913)

Make sure we re-parent itimers.  If subthread exec's with timer pending,
signal is delivered to old group-leader and can panic kernel.

Signed-off-by: Linus Torvalds <torvalds@ppc970.osdl.org>
Signed-off-by: Chris Wright <chrisw@osdl.org>

diff --git a/fs/exec.c b/fs/exec.c
index e56ee24370255e2ab4df9a3933ec03f0d07a2de3..422cc0ec5e366b846336a22398ddc019ca6212c2 100644 (file)
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -649,6 +649,7 @@ static inline int de_thread(struct task_struct *tsk)
        }
        sig->group_exit_task = NULL;
        sig->notify_count = 0;
+       sig->real_timer.data = (unsigned long)current;
        spin_unlock_irq(lock);
 
        /*