Make sure we clean user_tid when we've released the

memory space it was associated with.

1 files changed, 5 insertions, 2 deletions

diff --git a/kernel/fork.c b/kernel/fork.c
index 6eb0499511cc..a9f8eb192f9a 100644
--- a/kernel/fork.c
+++ b/kernel/fork.c
@@ -408,12 +408,15 @@ void mm_release(void)
 		complete(vfork_done);
 	}
 	if (tsk->user_tid) {
+		int * user_tid = tsk->user_tid;
+		tsk->user_tid = NULL;
+
 		/*
 		 * We dont check the error code - if userspace has
 		 * not set up a proper pointer then tough luck.
 		 */
-		put_user(0, tsk->user_tid);
-		sys_futex((unsigned long)tsk->user_tid, FUTEX_WAKE, 1, NULL);
+		put_user(0, user_tid);
+		sys_futex((unsigned long)user_tid, FUTEX_WAKE, 1, NULL);
 	}
 }