commit 8b3ec6814c83d76b85bd13badc48552836c24839
author Al Viro <viro@zeniv.linux.org.uk> Wed May 30 17:11:23 2012 -0400
committer Al Viro <viro@zeniv.linux.org.uk> Fri Jun 01 10:37:01 2012 -0400
tree 2430a4511c7ea41f67b0d841f4c42eac43828db3
parent e5467859f7f79b69fc49004403009dfdba3bec53

take security_mmap_file() outside of ->mmap_sem

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

mm/nommu.c

diff --git a/mm/nommu.c b/mm/nommu.c
index acfe419..8cbfd62 100644
--- a/mm/nommu.c
+++ b/mm/nommu.c
@@ -889,7 +889,6 @@
 				 unsigned long *_capabilities)
 {
 	unsigned long capabilities, rlen;
-	unsigned long reqprot = prot;
 	int ret;
 
 	/* do the simple checks first */
@@ -1050,9 +1049,6 @@
 	ret = security_mmap_addr(addr);
 	if (ret < 0)
 		return ret;
-	ret = security_mmap_file(file, reqprot, prot, flags);
-	if (ret < 0)
-		return ret;
 
 	/* looks okay */
 	*_capabilities = capabilities;
@@ -1492,9 +1488,12 @@
 	unsigned long ret;
 	struct mm_struct *mm = current->mm;
 
-	down_write(&mm->mmap_sem);
-	ret = do_mmap(file, addr, len, prot, flag, offset);
-	up_write(&mm->mmap_sem);
+	ret = security_mmap_file(file, prot, flag);
+	if (!ret) {
+		down_write(&mm->mmap_sem);
+		ret = do_mmap(file, addr, len, prot, flag, offset);
+		up_write(&mm->mmap_sem);
+	}
 	return ret;
 }
 EXPORT_SYMBOL(vm_mmap);
@@ -1515,9 +1514,12 @@
 
 	flags &= ~(MAP_EXECUTABLE | MAP_DENYWRITE);
 
-	down_write(&current->mm->mmap_sem);
-	retval = do_mmap_pgoff(file, addr, len, prot, flags, pgoff);
-	up_write(&current->mm->mmap_sem);
+	ret = security_mmap_file(file, prot, flags);
+	if (!ret) {
+		down_write(&current->mm->mmap_sem);
+		retval = do_mmap_pgoff(file, addr, len, prot, flags, pgoff);
+		up_write(&current->mm->mmap_sem);
+	}
 
 	if (file)
 		fput(file);