| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20070212003906.GE8262@rere.qmqm.pl> Date: Mon, 12 Feb 2007 01:39:06 +0100 From: Michał Mirosław <mirq-linux@...e.qmqm.pl> To: netfilter-devel@...ts.netfilter.org Cc: linux-kernel@...r.kernel.org Subject: [PATCH 2.6.20 04/10] nfnetlink_log: fix possible use-after-free Paranoia: instance_put() might have freed the inst pointer when we spin_unlock_bh(). Signed-off-by: Michał Mirosław <mirq-linux@...e.qmqm.pl> --- linux-2.6.20/net/netfilter/nfnetlink_log.c.2 2007-02-11 20:43:24.000000000 +0100 +++ linux-2.6.20/net/netfilter/nfnetlink_log.c 2007-02-11 20:46:33.000000000 +0100 @@ -393,8 +393,8 @@ static void nfulnl_timer(unsigned long d spin_lock_bh(&inst->lock); __nfulnl_send(inst); - instance_put(inst); spin_unlock_bh(&inst->lock); + instance_put(inst); } /* This is an inline function, we don't really care about a long - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists