)]}'
{
  "commit": "ebe06187bf2aec10d537ce4595e416035367d703",
  "tree": "a428632381694d7de07944ea5398df4dfb20f0e1",
  "parents": [
    "68986c9f0f4552c34c248501eb0c690553866d6e"
  ],
  "author": {
    "name": "Konstantin Khlebnikov",
    "email": "koct9i@gmail.com",
    "time": "Tue Jun 17 06:58:05 2014 +0400"
  },
  "committer": {
    "name": "Linus Torvalds",
    "email": "torvalds@linux-foundation.org",
    "time": "Mon Jun 16 17:21:59 2014 -1000"
  },
  "message": "epoll: fix use-after-free in eventpoll_release_file\n\nThis fixes use-after-free of epi-\u003efllink.next inside list loop macro.\nThis loop actually releases elements in the body.  The list is\nrcu-protected but here we cannot hold rcu_read_lock because we need to\nlock mutex inside.\n\nThe obvious solution is to use list_for_each_entry_safe().  RCU-ness\nisn\u0027t essential because nobody can change this list under us, it\u0027s final\nfput for this file.\n\nThe bug was introduced by ae10b2b4eb01 (\"epoll: optimize EPOLL_CTL_DEL\nusing rcu\")\n\nSigned-off-by: Konstantin Khlebnikov \u003ckoct9i@gmail.com\u003e\nReported-by: Cyrill Gorcunov \u003cgorcunov@openvz.org\u003e\nCc: Stable \u003cstable@vger.kernel.org\u003e # 3.13+\nCc: Sasha Levin \u003csasha.levin@oracle.com\u003e\nCc: Jason Baron \u003cjbaron@akamai.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b73e0621ce9e79eaf3a5d67cbb28c0fbeb9a99f3",
      "old_mode": 33188,
      "old_path": "fs/eventpoll.c",
      "new_id": "b10b48c2a7afaf859f2b508d5bca784abfe870ac",
      "new_mode": 33188,
      "new_path": "fs/eventpoll.c"
    }
  ]
}