Sebastian Andrzej Siewior 73d20564e0 hrtimer: Don't dereference the hrtimer pointer after the callback
A hrtimer can be released in its callback, but lockdep_hrtimer_exit()
dereferences the pointer after the callback returns, i.e. a potential use
after free.

Retrieve the context in which the hrtimer expires before the callback is
invoked and use it in lockdep_hrtimer_exit().

Fixes: 40db173965c0 ("lockdep: Add hrtimer context tracing bits")
Reported-by: syzbot+62c155c276e580cfb606@syzkaller.appspotmail.com
Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Link: https://lkml.kernel.org/r/20200331201849.fkp2siy3vcdqvqlz@linutronix.de
2020-04-01 13:20:14 +02:00
..
2020-03-21 16:00:23 +01:00
2020-01-14 12:20:48 +01:00
2019-04-19 19:17:04 +02:00
2020-03-21 16:00:24 +01:00
2020-02-21 11:22:15 -08:00
2018-11-23 11:51:20 +01:00
2018-11-23 11:51:21 +01:00
2020-03-30 18:51:47 -07:00
2020-03-30 18:51:47 -07:00