lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Tue, 25 Sep 2012 10:48:30 +0800 From: Gao feng <gaofeng@...fujitsu.com> To: davem@...emloft.net Cc: stephen.hemminger@...tta.com, jengelh@...i.de, eric.dumazet@...il.com, kuznet@....inr.ac.ru, netdev@...r.kernel.org, Gao feng <gaofeng@...fujitsu.com> Subject: [PATCH] inet_diag: fix panic when unload inet_diag when inet_diag being compiled as module, inet_diag_handler_dump set netlink_dump_control.dump to inet_diag_dump,so if module inet_diag is unloaded,netlink will still try to call this function in netlink_dump. this will cause kernel panic. fix this by adding a reference of inet_diag module before setting netlink_callback, and release this reference in netlink_callback.done. Thanks for all help from Stephen,Jan and Eric. Signed-off-by: Gao feng <gaofeng@...fujitsu.com> --- net/ipv4/inet_diag.c | 46 ++++++++++++++++++++++++++++++++++++++++++++-- 1 files changed, 44 insertions(+), 2 deletions(-) diff --git a/net/ipv4/inet_diag.c b/net/ipv4/inet_diag.c index 570e61f..e573090 100644 --- a/net/ipv4/inet_diag.c +++ b/net/ipv4/inet_diag.c @@ -903,6 +903,12 @@ static int inet_diag_dump(struct sk_buff *skb, struct netlink_callback *cb) return __inet_diag_dump(skb, cb, nlmsg_data(cb->nlh), bc); } +static int inet_diag_done(struct netlink_callback *cb) +{ + module_put(THIS_MODULE); + return 0; +} + static inline int inet_diag_type2proto(int type) { switch (type) { @@ -972,8 +978,26 @@ static int inet_diag_rcv_msg_compat(struct sk_buff *skb, struct nlmsghdr *nlh) { struct netlink_dump_control c = { .dump = inet_diag_dump_compat, + .done = inet_diag_done, }; - return netlink_dump_start(net->diag_nlsk, skb, nlh, &c); + int err; + /* + * netlink_dump will call inet_diag_dump_compat, + * so we need a reference of THIS_MODULE. + */ + if (!try_module_get(THIS_MODULE)) + return -EPROTONOSUPPORT; + + err = netlink_dump_start(net->diag_nlsk, skb, nlh, &c); + + if ((err != -EINTR) && (err != -ENOBUFS)) { + /* + * netlink_callback set failed, release the + * referenct of THIS_MODULE. + */ + module_put(THIS_MODULE); + } + return err; } } @@ -1001,8 +1025,26 @@ static int inet_diag_handler_dump(struct sk_buff *skb, struct nlmsghdr *h) { struct netlink_dump_control c = { .dump = inet_diag_dump, + .done = inet_diag_done, }; - return netlink_dump_start(net->diag_nlsk, skb, h, &c); + int err; + /* + * netlink_dump will call inet_diag_dump, + * so we need a reference of THIS_MODULE. + */ + if (!try_module_get(THIS_MODULE)) + return -EPROTONOSUPPORT; + + err = netlink_dump_start(net->diag_nlsk, skb, h, &c); + + if ((err != -EINTR) && (err != -ENOBUFS)) { + /* + * netlink_callback set failed, release the + * referenct of THIS_MODULE. + */ + module_put(THIS_MODULE); + } + return err; } } -- 1.7.7 -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists